4 matches found
Event Calendar WD < 1.1.45 - Cross-Site Scripting (XSS)
The Event Calendar WD WordPress plugin fixed a Cross-Site Scripting XSS security vulnerability within the calendar display code and date...
PT-2012-5371
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can occur through the calendar display name in certain PHP fil...
CVE-2005-1756: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields...