CVE-2026-36989

A SQL Injection vulnerability affects LuxSoft LuxCal through version 5.3.4L , present in the files rssfeed.php and common/retrieve.php . The vulnerability is exploitable over the network with no authentication or user interaction required (CVSS 3.1: 5.8 MEDIUM , vector AV:N/AC:L/PR:N/UI:N/S:C/C:L...

EUVD-2026-77110

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...