VULNERABILITY INTELLIGENCE

CVE-2026-78070

EPSS probability0.37%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-08-28

Description

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.

Weakness classification

  • security@joomla.org: CWE-89

Primary references