CVE-2018-6397: Joomlacalendars Picture Calendar

High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days.

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

Affected products

• Joomlacalendars Picture Calendar: version 3.1.4 only

Published 2018-01-30. Last modified 2026-06-17.