| Package | Affected versions | Patched versions |
|---|---|---|
| webcalendar | = 0.9.11= 0.9.15= 0.9.16= 0.9.19= 0.9.20= 0.9.21= 0.9.22= 0.9.23= 0.9.24= 0.9.25= 0.9.26= 0.9.27= 0.9.28= 0.9.29= 0.9.30= 0.9.31= 0.9.32= 0.9.33= 0.9.34= 0.9.35= 0.9.36= 0.9.37= 0.9.38= 0.9.39= 0.9.40= 0.9.41= 0.9.42= 0.9.43= 0.9.44= 0.9.8 |
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free