CVE-2023-47175 in LuxCal Web Calendar

Résumé

par MITRE • 20/11/2023

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 15/11/2023
• Divulgation: 20/11/2023
• Modérer: accepté
• Entrée: VDB-245795
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 6.1 (NVD)
• EPSS: 0.00683
• KEV: non
• Activités: très faible
• Secteur: Education, Homeoffice, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-47175
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-47175
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-47175/