CVE-2026-78070 — Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

CVE-2026-78070

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 PUBLISHED

Description (CNA)

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.

Affected (CNA)

Vendor / product	Versions
digital-peak.com / DP Calendar extension for Joomla	affected 5.5.0-10.11.2

CWE

CWE-89

References

https://joomla.digital-peak.com/products/dpcalendar

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.