| Package | Affected versions | Patched versions |
|---|---|---|
| luxcal | < 5.2.0 | 5.2.0 |
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free