SQL Injection in Digital-Peak.com Dp Calendar Extension For Joomla
CVE-2026-78070
Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.
Vulnerability class: SQL Injection
Affected products
- Digital-peak.com Dp Calendar Extension For Joomla — versions 5.5.0-10.11.2
Weakness classification (CWE)
References
- security@joomla.org (product)