CVE-2026-78070

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.

  • Published Aug 28, 2026
  • CVSS 6.9 medium
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-78070 at the National Vulnerability Database