Is CVE-2026-109901 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109901?

CVE-2026-109901 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-109901

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.