Lucene search

K
cvelistJpcertCVELIST:CVE-2021-20725
HistoryMay 24, 2021 - 3:20 a.m.

CVE-2021-20725

2021-05-2403:20:31
jpcert
www.cve.org
1
cross-site scripting
calendar01
admin page
remote attacker
arbitrary script

EPSS

0.001

Percentile

39.4%

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CNA Affected

[
  {
    "product": "[Calendar01] free edition",
    "vendor": "PHP Factory",
    "versions": [
      {
        "status": "affected",
        "version": "ver1.0.1 and earlier"
      }
    ]
  }
]

EPSS

0.001

Percentile

39.4%

Related for CVELIST:CVE-2021-20725