CVE-2023-47175

Summary

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.

Affected Software

VendorProductVersion RangeStatus
LuxSoftLuxCal Web Calendarprior to 5.2.4M (MySQL version)affected
LuxSoftLuxCal Web Calendarprior to 5.2.4L (SQLite version)affected

Weaknesses

  • Cross-site scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References