PatchTheCVEluxcal web calendar vulnerabilities and fixes
Recent CVEs affecting luxcal web calendar, with upgrade or downgrade steps. 4 tracked.
Also searched as: luxcalwebcalendar.
luxcal web calendar has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-02-18. Highest priority: CVE-2025-25222 (score 55/100).
- CVE-2025-25224 HIGH 7.5 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missin
- CVE-2025-25223 MEDIUM 5.3 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path t
- CVE-2025-25222 CRITICAL 9.8 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i
- CVE-2025-25221 CRITICAL 9.8 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i
FAQ
How do I fix luxcal web calendar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is luxcal web calendar being exploited right now?
None of the tracked luxcal web calendar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which luxcal web calendar CVE should I patch first?
CVE-2025-25222 currently ranks highest (55/100): The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i.