Approved changes feed: RSS · Atom

cpe:2.3:a:digital-peak.com:dp_calendar_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigital Peak.Com (5ca04ac7-0768-5a6e-995f-c8172ad8988f)
ProductDp Calendar Extension For Joomla (f43d2d62-6ed9-553a-8ee0-21ae9d5da1a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-78071 vulnerable 2026-09-16 04:33:44.584053 Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.
Published: 2026-08-28T07:49:52.253Z
Updated: 2026-09-10T10:45:13.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57831 vulnerable 2026-07-29 01:03:16.337620 Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2
Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.
Published: 2026-07-15T08:08:04.874Z
Updated: 2026-08-12T13:53:49.573Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.