CVE-2024-22635

creationtimestamp| type| source ---|---|--- 2024-01-25 22:26:23+00:00| seen| https://t.me/ctinow/173837 2024-02-18 18:11:21+00:00| seen| https://t.me/ctinow/187321 2025-06-20 19:43:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19045...

CVE-2024-22635

WebCalendar v1.3.0 contains a reflected cross-site scripting (XSS) vulnerability in the /WebCalendarvqsmnseug2/edit_entry.php component. The root cause is insufficient filtering/escaping of user-supplied data, enabling execution of arbitrary script or HTML in a victim’s browser. Public references...

CVE-2024-22635

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /WebCalendarvqsmnseug2/editentry.php...