Humhub Calendar vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Humhub Calendar: 1 record(s), with affected versions and fixes.
cpe:2.3:a:humhub:calendar

CVE-2026-29052 Medium · 6.1 CWE-79 Mar 5, 2026

HumHub Calendar Module: Stored XSS in Event Types

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.