Lucene search
PRIOn knowledge basePRION:CVE-2021-42078HistoryNov 08, 2021 - 5:15 a.m.
Cross site scripting
2021-11-0805:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
30.4%
PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/events_manager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_event_calendar | eq | 2021114.0.0 |
Related
zdt
zdt
PHP Event Calendar Lite Edition Cross Site Scripting Vulnerability
2021-11-05 00:00:00
packetstorm
packetstorm
PHP Event Calendar Lite Edition Cross Site Scripting
2021-11-05 00:00:00
cvelist
cvelist
CVE-2021-42078
2021-11-08 04:07:18
cve
cve
CVE-2021-42078
2021-11-08 05:15:07
nvd
nvd
CVE-2021-42078
2021-11-08 05:15:07