Description
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LuxSoft | LuxCal Web Calendar | ≤ 5.3.4L | — |
Medium · 5.8
CVE-2026-36989
EUVD-2026-77110GHSA-73wr-rfp9-m422
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.
Published Sep 13, 2026 · Updated Sep 15, 2026 · Assigned by mitre