LuxCal Web Calendar vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

LW

Product

LuxCal Web Calendar

by LuxSoft · last CVE Sep 13, 2026

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 4High 1Medium 4Low 0

Severity

All severities9 Critical4 High1 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add LuxCal Web Calendar to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-25222	9.8	0%	Feb 18	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php Affected: before 5.3.3l; before 5.3.3m
CVE-2025-25221	9.8	0%	Feb 18	The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php Affected: before 5.3.3l; before 5.3.3m
CVE-2023-46700	9.8	1%	Nov 20	SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated… Affected: prior to 5.2.4M (MySQL version); prior to 5.2.4L (SQLite version)
CVE-2023-39939	9.1	1%	Aug 21	SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated… Affected: prior to 5.2.3M (MySQL version); prior to 5.2.3L (SQLite version)