The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.CreditsPhil TaylorReferenceshttps://joomla.digital-peak.com/products/dpcalendar