SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
quanticalabs timetable responsive schedule 1.5