PatchTheCVE: joomlacalendarshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-6398: SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load https://patchthecve.com/cve/CVE-2018-6398.htmlhttps://patchthecve.com/cve/CVE-2018-6398.htmlWed, 17 Jun 2026 02:01:47 +0000CRITICAL 9.8: SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.CVE-2018-6397: Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder paramethttps://patchthecve.com/cve/CVE-2018-6397.htmlhttps://patchthecve.com/cve/CVE-2018-6397.htmlWed, 17 Jun 2026 02:01:47 +0000HIGH 7.5: Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.CVE-2018-6395: SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load achttps://patchthecve.com/cve/CVE-2018-6395.htmlhttps://patchthecve.com/cve/CVE-2018-6395.htmlWed, 17 Jun 2026 02:01:47 +0000CRITICAL 9.8: SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action.