Skip to contentHumhub Calendar vulnerabilities
- humhub calendarCalendar < 1.3.18 - Contributor+ Stored XSS via event_link ParameterCVE-2026-148276.8 Medium
- humhub calendarHumHub Calendar Module: Stored XSS in Event TypesCVE-2026-290526.9 Medium
- humhub calendarCalendar <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc'CVE-2025-145486.4 Medium
- humhub calendarCalendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-28318.8 High
- humhub calendarPotential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in...CVE-2023-306785.1 Medium
- humhub calendarInformation exposure in Calendar prior to version 12.3.05.10000 allows attacker to access...CVE-2022-337053.3 Low
- humhub calendarOS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2...CVE-2019-118297.3 High
- humhub calendarCross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615...CVE-2019-118256.5 Medium
- humhub calendarInformation exposure through process environment vulnerability in Synology Calendar before 2.3.3...CVE-2019-118205.5 Medium
- humhub calendarRelative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2...CVE-2018-132994.3 Medium
- humhub calendarImproper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows...CVE-2018-89275.4 Medium
- humhub calendarCross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1...CVE-2018-89156.5 Medium