CVE-2013-6793 Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2) da...
MediumCVSS 4.3
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2) date field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| olat | = 7.8.0.1 | No fix listed |
References
- 99075 vdb-entry
- packetstormsecurity.com exploit
- 20131029 Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability exploit mailing-list
- 29279 exploit
- www.vulnerability-lab.com exploit