Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

CVE-2012-0846

CVE-2012-0846 is an XSS vulnerability in Craig Knudsen WebCalendar 1.2.4 that allows remote injection of arbitrary scripts/HTML via the Location variable. The connected records for CVE-2012-5384 describe additional XSS vectors affecting the same WebCalendar product (including parameters in edit_e...

FreeBSD : WebCalendar -- Persistent XSS (2b20fd5f-552e-11e1-9fb7-003067b2972c)

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...