Skip to content

CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-36989

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-09-13
Updated: 2026-09-15
Assigning organization: mitre

Description

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LuxSoft LuxCal Web Calendar

Default version status: unaffected

0 to ≤ 5.3.4Laffected

References