CVE-2013-5953

2014-03-1914:17:44

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-5953

xss

vulnerability

multi calendar

joomla

com_multicalendar

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) calid or (2) paletteDefault parameter in an editevent action to index.php.

Affected configurations

NVD

Node

codepeoplecom_multicalendarRange≤4.8.5joomla\!

codepeoplecom_multicalendarMatch4.0.2joomla\!

AND

joomlajoomla\!

CPENameOperatorVersion
codepeople:com_multicalendarcodepeople com multicalendarle4.8.5
codepeople:com_multicalendarcodepeople com multicalendareq4.0.2