8.5
Élevée
CVE-2026-109901 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CP Multi View Event Calendar 1.4 | premières → 1.4.41 | Pas de correctif indiqué |
Autres CVE de CP Multi View Event Calendar
Les 5 CVE de CP Multi View Event Calendar →
CVE-2026-25465
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP…
6.5
Moyenne
CVE-2025-58009
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting…
3.8
Faible
CVE-2023-23814
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured…
3.8
Faible
CVE-2023-28492
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue…
4.3
Moyenne