CVE-2006-3319

The CVE-2006-3319 entry corresponds to a Cross-site scripting (XSS) vulnerability in the rss/index.php file of PHP iCalendar 2.22 and earlier. The underlying issue is an injection of arbitrary web script/HTML via the cal parameter, allowing remote attackers to execute injected scripts in victims’...