CVE-2021-42078

PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting XSS, as demonstrated by the /server/ajax/eventsmanager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the sit...

CVE-2021-42078

The connected records confirm CVE-2021-42078 affects PHP Event Calendar (Lite edition). A persistent cross-site scripting (XSS) vulnerability exists in the /server/ajax/events_manager.php title parameter, enabling attacker-controlled script execution in the context of other users and potential de...