Approved changes feed: RSS · Atom

cpe:2.3:a:humhub:calendar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHumhub (207df78f-b45f-5aa6-92d9-43f6e5adcae3)
ProductCalendar (d531413d-7c93-5c35-9b8b-5c8ef99c2104)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/humhub/calendar purl2cpe 2026-06-01 10:15:38.392466

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-29052 vulnerable 2026-06-08 07:55:16.038438 HumHub Calendar Module: Stored XSS in Event Types
The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.
Published: 2026-03-05T05:48:10.557Z
Updated: 2026-03-05T15:30:11.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.