CVE-2026-29052

MEDIO 6.1CVE-2026-29052 · Published 05/03/2026 · updated 02/09/2026

En resumen

CVE-2026-29052 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a calendar (humhub).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.19%, mayor que el 8.2% de las vulnerabilidades.
Solución: actualizar a 1.8.11 o posterior.

Package	Affected versions	Patched versions
calendar humhub	`< 1.8.11`	`1.8.11`

Description

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.

References

humhub/calendar release v1.8.11 · Product
humhub/calendar security advisory · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free