CVE-2012-0846 Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable.
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the Location variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k5n webcalendar | = 1.2.4 | No fix listed |
References
- 20120119 Webcalendar 1.2.4 'location' XSS exploit mailing-list
- sourceforge.net
- sourceforge.net
- [oss-security] 20120211 CVE-request: Webcalendar 1.2.4 location XSS mailing-list
- [oss-security] 20120211 Re: CVE-request: Webcalendar 1.2.4 location XSS mailing-list
- [oss-security] 20120212 Re: CVE-request: Webcalendar 1.2.4 location XSS mailing-list
- [oss-security] 20120213 Re: CVE-request: Webcalendar 1.2.4 location XSS mailing-list
- 51600 vdb-entry
- webcalendar-location-xss(72563) vdb-entry