PT-2022-27361 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field in the /calendar/viewcalendar.php component. This enables the execution of maliciou...

CVE-2022-44962

CVE-2022-44962 corresponds to a cross-site scripting (XSS) vulnerability in webtareas version 2.4p5, located in the /calendar/viewcalendar.php component. The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Subject field, which could affect u...