CVE-2021-42078
N/A
N/A
Summary
PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/events_manager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the site.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-049.txt
- http://seclists.org/fulldisclosure/2021/Nov/24
References
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-049.txt
- http://seclists.org/fulldisclosure/2021/Nov/24
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.