CVE-2026-29052
The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Analyzed - security-advisories@github.com
- Published
- 2026-03-05
- Last modified
- 2026-03-05
- Weaknesses
- CWE-79
Affected products
References
- https://github.com/humhub/calendar/releases/tag/v1.8.11
- https://github.com/humhub/calendar/security/advisories/GHSA-gqj3-pmp2-mrx8
