Cross site scripting

2010-05-2514:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters.

CPENameOperatorVersion
php-calendareq0.8
php-calendareq0.5
php-calendareq0.7
php-calendareq0.1
php-calendareq2.0 beta1
php-calendareq2.0 beta5
php-calendareq0.2
php-calendareq0.10
php-calendareq0.4
php-calendareq2.0 beta4

Name	Operator	Version
php-calendar	eq	0.8
php-calendar	eq	0.5
php-calendar	eq	0.7
php-calendar	eq	0.1
php-calendar	eq	2.0 beta1
php-calendar	eq	2.0 beta5
php-calendar	eq	0.2
php-calendar	eq	0.10
php-calendar	eq	0.4
php-calendar	eq	2.0 beta4