Lucene search

CVE-2022-4455

🗓️ 13 Dec 2022 18:10:15Reported by VulDBType

Vulnerability in sproctor php-calendar allows remote attackers to initiate cross-site scripting via manipulation of $_SERVER['PHP_SELF'] in index.ph

Reporter	Title	Published	Views	Family All 8
UbuntuCve	CVE-2022-4455	13 Dec 202200:00	–	ubuntucve
OSV	CGA-J899-X8FM-W43P	6 Jun 202412:28	–	osv
OSV	CGA-H8FM-G4H3-R7CW	6 Jun 202412:26	–	osv
OSV	CVE-2022-4455	13 Dec 202218:15	–	osv
OSV	CGA-28R8-5X8C-45P6	6 Jun 202412:09	–	osv
Cvelist	CVE-2022-4455 sproctor php-calendar index.php cross site scripting	13 Dec 202200:00	–	cvelist
Prion	Cross site scripting	13 Dec 202218:15	–	prion
NVD	CVE-2022-4455	13 Dec 202218:15	–	nvd

Nvd

Node

php-calendar php-calendarRange<2022-04-28

[
  {
    "vendor": "sproctor",
    "product": "php-calendar",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/sproctor/php-calendar/commit/a2941109b42201c19733127ced763e270a357809
vuldb	www.vuldb.com/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2022 18:15Current

4.7Medium risk

Vulners AI Score4.7

CVSS33.5 - 6.1

EPSS0.00073