CVE-2026-29052

MEDIO 6.1CVE-2026-29052 · Published 05/03/2026 · updated 02/09/2026

In breve

CVE-2026-29052 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda calendar (humhub).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.19%, superiore al 8.2% delle vulnerabilità.
Correzione: aggiornare a 1.8.11 o successiva.

Package	Affected versions	Patched versions
calendar humhub	`< 1.8.11`	`1.8.11`

Description

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.

References

humhub/calendar release v1.8.11 · Product
humhub/calendar security advisory · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free