https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-4337.htmlhttps://patchthecve.com/cve/CVE-2009-4337.htmlTue, 16 Jun 2026 23:13:28 +0000HIGH 7.5: SQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2008-6691.https://patchthecve.com/cve/CVE-2009-4336.htmlhttps://patchthecve.com/cve/CVE-2009-4336.htmlTue, 16 Jun 2026 23:13:28 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2008-6691.htmlhttps://patchthecve.com/cve/CVE-2008-6691.htmlTue, 16 Jun 2026 23:02:46 +0000HIGH 7.5: SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.