CVE-2026-78071

Vulnerability Description

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.

Related Weaknesses (CWE)

CWE-79

References

https://joomla.digital-peak.com/products/dpcalendar

FAQ

What is CVE-2026-78071?

CVE-2026-78071 is a documented vulnerability. Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, need...

How severe is CVE-2026-78071?

CVSS scoring is not yet available for CVE-2026-78071. Check NVD for updates.

Is there a patch for CVE-2026-78071?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.