Advisories · Technology

digital-peak.com DP Calendar extension for Joomla.

Every CVE that names digital-peak.com DP Calendar extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78071 CVE record

CVSS 7.5 High

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0
- digital-peak.com DP Calendar extension for Joomla
- Cross-site scripting (XSS)
Not analysed yet 28 Aug 2026
CVE-2026-78070 CVE record

CVSS 6.9 Medium

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2
- digital-peak.com DP Calendar extension for Joomla
- SQL injection
Not analysed yet 28 Aug 2026
CVE-2026-57831 CVE record

CVSS 8.7 High

Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2
- digital-peak.com DP Calendar extension for Joomla
- SQL injection
Not analysed yet 15 Jul 2026