| Package | Affected versions | Patched versions |
|---|---|---|
| luxcal web calendar | < 5.2.4l< 5.2.4m | 5.2.4l5.2.4m |
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free