CVE-2026-78071
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0 - 10.11.2
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0 - 10.11.2 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.
| CWE | CWE-79 |
| Vendor | digital-peak.com |
| Product | dp calendar extension for joomla |
| Published | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for digital-peak.com dp calendar extension for joomla
Be the first to know when new unknown vulnerabilities affecting digital-peak.com dp calendar extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
digital-peak.com / DP Calendar extension for Joomla
7.0.0-10.11.2
References
Credits
Toan Le