CVE-2018-5974

Name of the Vulnerable Software and Affected Versions: SimpleCalendar version 3.1.9

Description: A SQL Injection issue exists in the SimpleCalendar component for Joomla, specifically via the catid array parameter. This allows for potential exploitation.

Recommendations: For version 3.1.9, consider restricting access to the vulnerable catid parameter in the SimpleCalendar component until a patch is available. Avoid using the catid parameter in affected API endpoints or functions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.