CVE-2026-78071
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.
| CWE | CWE-79 |
| Vendor | digital-peak.com |
| Product | dp calendar extension for joomla |
| Published | Aug 28, 2026 |
| Last Updated | Sep 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for digital-peak.com dp calendar extension for joomla
Be the first to know when new unknown vulnerabilities affecting digital-peak.com dp calendar extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
digital-peak.com / DP Calendar extension for Joomla
7.0.0-8.19.5 9.0.0-10.12.0
References
Credits
Toan Le Phil Taylor, mysites.guru