Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: digital-peak.com Clear all filters
TI-2026-54306 CVE-2026-78071 · GHSA-32gf-548r-6r9c

Cross-site scripting in digital-peak.com DP Calendar extension for Joomla

Priority LOW 35

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission…

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00418 Published 2026-08-28 No fix listed CWE-79
TI-2026-54305 CVE-2026-78070 · GHSA-v6xp-fwh7-w4rv

SQL injection in digital-peak.com DP Calendar extension for Joomla

Priority LOW 31

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for ar…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00369 Published 2026-08-28 No fix listed CWE-89
TI-2026-41649 CVE-2026-57831 · GHSA-r6gc-42q2-64m6

SQL injection in digital-peak.com DP Calendar extension for Joomla

Priority MEDIUM 44

Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2026-07-15 No fix listed CWE-89