CVE-2017-20267

Name of the Vulnerable Software and Affected Versions Joomla! Component Calendar Planner version 1.0.1

Description An SQL injection allows unauthenticated attackers to inject SQL commands via the category id parameter. By sending GET requests to the events view containing malicious SQL code in the category id parameter, attackers can extract sensitive database information. SQL injection is a type of vulnerability where an attacker can interfere with the queries that an application makes to its database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.