PT-2022-27361 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field in the /calendar/viewcalendar.php component. This enables the execution of maliciou...