| Package | Affected versions | Patched versions |
|---|---|---|
| calendar planner | = 1.0.1 |
Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the category_id parameter. Attackers can send GET requests to the events view with malicious SQL code in the category_id parameter to extract sensitive database information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free