Lucene search
+L

10 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting Detection

Triconsole Datepicker Calendar before 3.77 contains a cross-site scripting vulnerability in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.1CVSS6.1AI score0.06196EPSS
SaveExploits4References6
RedhatCVE
RedhatCVE
•added 2025/05/22 6:27 p.m.•18 views

CVE-2021-27330

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.1CVSS6AI score0.06196EPSS
SaveExploits4References1
CNVD
CNVD
•added 2021/02/28 12:00 a.m.•65 views

Triconsole Datepicker Calendar Cross-Site Scripting Vulnerability

Triconsole Datepicker Calendar is a Triconsole open source application. Provides a calendar component . A cross-site scripting vulnerability exists in Triconsole Datepicker Calendar prior to version 3.77, which stems from calendarform.php not fully validating user input, which allows an attacker ...

6.1CVSS6.1AI score0.06196EPSS
SaveExploits4References1
osv_cve
osv_cve
•added 2021/02/25 4:15 p.m.•18 views

CVE-2021-27330

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.1CVSS6.3AI score0.06196EPSS
SaveExploits4References4
NVD
NVD
•added 2021/02/25 4:15 p.m.•32 views

CVE-2021-27330

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.1CVSS0.06196EPSS
SaveExploits4References4
Prion
Prion
•added 2021/02/25 4:15 p.m.•26 views

Cross site scripting

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

4.3CVSS6AI score0.06196EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2021/02/25 3:11 p.m.•58 views

CVE-2021-27330

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.3AI score0.06196EPSS
SaveExploits4References4
CNNVD
CNNVD
•added 2021/02/25 12:00 a.m.•25 views

Triconsole Datepicker Calendar – Cross-site scripting vulnerability

Triconsole Datepicker Calendar is a Triconsole open source application. Provides a calendar component . A cross-site scripting vulnerability exists in Triconsole Datepicker Calendar prior to version 3.77, which stems from calendarform.php not fully validating user input, which allows an attacker ...

6.1CVSS6.2AI score0.06196EPSS
SaveExploits4References6
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•2 views

PT-2021-17399

Name of the Vulnerable Software and Affected Versions Triconsole Datepicker Calendar versions prior to 3.77 Description The issue affects the calendar form.php file, allowing attackers to perform cross-site scripting XSS attacks. This can lead to the reading of authentication cookies that are sti...

6.1CVSS0.06196EPSS
SaveExploits4References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/25 12:00 a.m.•5 views

CVE-2021-27330: Improper Neutralization of Input During Web Page Generation

Triconsole Datepicker Calendar 3.77 is affected by cross-site scripting XSS in calendarform.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents...

6.1CVSS5.6AI score0.06196EPSS
SaveExploits4References2
Rows per page
Query Builder