CVE-2024-21727

CVE-2024-21727: Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14

Vendor Digital-Peak.com

Product DP Calendar for Joomla

Weakness CWE-79 · XSS

Published February 15, 2024

Last update November 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

XSS vulnerability in DP Calendar component for Joomla.

Key dates

02Disclosure timeline

February 15, 2024 CVE published

November 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-21727 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html AskarLabs — CWE-79 write-up Cross-Site Scripting

Related vulnerabilities

04Related CVE

CVE-2026-18100 MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting CVE-2026-5510 GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-6128 All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter CVE-2026-64851 Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers CVE-2026-81760 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability