CVE-2024-22635

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...

PT-2024-19511 · Unknown · Webcalendar

Name of the Vulnerable Software and Affected Versions: WebCalendar version 1.3.0 Description: A reflected cross-site scripting XSS issue was discovered in the /WebCalendarvqsmnseug2/edit entry.php component. This issue allows for the execution of malicious scripts on the client-side...

CVE-2024-22635

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...

CVE-2024-22635

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...

CVE-2024-22635

WebCalendar v1.3.0 contains a reflected cross-site scripting (XSS) vulnerability in the /WebCalendarvqsmnseug2/edit_entry.php component. The root cause is insufficient filtering/escaping of user-supplied data, enabling execution of arbitrary script or HTML in a victim’s browser. Public references...

WebCalendar 安全漏洞

WebCalendar is a PHP application for maintaining calendars for individual users or groups of Intranet users. It can also be configured as an event calendar. WebCalendar v1.3.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of...

CVE-2024-22635: Improper Neutralization of Input During Web Page Generation

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...

WebCalendar 1.3.0 Cross Site Scripting

Exploit Title: WebCalendar Version: 1.3.0 - Stored XSS - Reflected XSS Date: 2024-3-1 Exploit Author: tmrswrr Vendor Homepage: http://www.k5n.us/webcalendar.php Version: 1.3.0 Tested on: https://www.softaculous.com/apps/calendars/WebCalendar Stored XSS 1 Write Events Add New Events Brief...

WebCalendar 1.3.0 Cross Site Scripting Vulnerability

Exploit Title: WebCalendar Version: 1.3.0 - Stored XSS - Reflected XSS Exploit Author: tmrswrr Vendor Homepage: http://www.k5n.us/webcalendar.php Version: 1.3.0 Tested on: https://www.softaculous.com/apps/calendars/WebCalendar Stored XSS 1 Write Events Add New Events Brief Description :...

WebCalendar 1.3 Cross Site Request Forgery

==================================================================================================================================== | Title : WebCalendar v1.3 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendor :...

CVE-2023-0289

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

WebCalendar 跨站脚本漏洞

WebCalendar is a PHP application for maintaining calendars for individual users or groups of Intranet users. It can also be configured as an event calendar. WebCalendar suffers from a cross-site scripting vulnerability that originates from an attacker being able to implement stored cross-site...

CVE-2023-0289

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

PT-2023-16145 · Unknown · Webcalendar

Name of the Vulnerable Software and Affected Versions: webcalendar versions prior to master Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository craigk5n/webcalendar. Recommendations: For versions prior to master, update to the master version...

CVE-2023-0289

CVE-2023-0289 - Stored XSS in WebCalendar affects the GitHub project webcalendar; affected software is the WebCalendar application (versions prior to master). The vulnerability is a stored cross-site scripting issue in the location field when creating or viewing events, leading to script executio...

CVE-2023-0289: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

Stored XSS

Description webcalendar has a feature to add event and display the location of it. This feature lead to stored xss everytime a user open the calendar or the event detail page. Proof of Concept 1. 1- login as user 2. 2- create an event 3. 3- insert the payload on "location" field 4. 4- Save 5. 5- ...