8.5
High
CVE-2026-109901 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CP Multi View Event Calendar 1.4 | earliest → 1.4.41 | No fix stated |
Other CVEs of CP Multi View Event Calendar
The 5 CVEs of CP Multi View Event Calendar →
CVE-2026-25465
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP…
6.5
Medium
CVE-2025-58009
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting…
3.8
Low
CVE-2023-23814
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured…
3.8
Low
CVE-2023-28492
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue…
4.3
Medium