Full Calendar Macro vulnerabilities

1 known vulnerability in Full Calendar Macro from XWiki. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  macro-fullcalendar: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-65091Jan 10, 2026Xwiki-contrib

  XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONService page (including guest users) can exploit a SQL injection vulnerability by accessing database info or startin