CVE-2006-1401

CVE-2006-1401 affects Calendar Express 2.2. The issue is multiple XSS in search.php exploitable via the allwords and oneword parameters, allowing remote script/HTML injection. The connected documents confirm the affected component and vulnerability class but do not provide explicit exploit detail...