Critical · 9.8 CVE-2025-26855 EUVD-2025-21863GHSA-qg92-5gwc-2jxx

Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

Published Jul 18, 2025 · Updated Jul 23, 2025 · Assigned by Joomla

Description

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands.

Vendor	Product	Affected	Fixed
joomcar.net	Articles Calendar extension for Joomla	1.0.0-1.0.1.0007	—