CVE-2013-5953

CVE-2013-5953 affects the Joomla! Multi Calendar component (com_multicalendar) 4.0.2 and possibly earlier versions (e.g., 4.8.5), with multiple XSS vulnerabilities in tmpl/layout_editevent.php. The root cause is inadequate sanitization of GET parameters calid and paletteDefault when task editeven...

CVE-2013-5953: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in tmpl/layouteditevent.php in the Multi Calendar commulticalendar component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 calid or 2 paletteDefault parameter in an...