Joomla Spider Calendar 3.2.6 SQL Injection

Joomla Spider Calendar component versions 3.2.6 and below suffer from a remote authenticated SQL injection vulnerability.