CVE-2026-78070: Digital-Peak.com Dp Calendar Extension For Joomla

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.

Affected products

• Digital-Peak.com Dp Calendar Extension For Joomla: version 5.5.0-10.11.2 only

Published 2026-08-28. Last modified 2026-08-28.