CVE-2008-1211

CVE-2008-1211 describes a cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x. An attacker can inject arbitrary web script or HTML by supplying crafted input to (1) the type parameter in calendar.php or (2) the category parameter in calendar_search.php. The provided sources (NVD and ...