CVE-2025-45314

A cross-site scripting (XSS) vulnerability exists in the /Calendar endpoint of hortusfox-web v4.4 . The root cause is the improper neutralization of input within the add function, which allows an attacker to execute arbitrary JavaScript in a user's browser via a crafted payload. As a temporary wo...