CVE-2026-114545

This module provides a View plugin that integrates a calendar view format powered by FullCalendar JavaScript library.

This module has an access bypass vulnerability which allows to update entity fields without checking field-level access.

The vulnerability is mitigated by the fact that an attacker must have access to update the entity itself.