CVE-2017-9072

Two CalendarXP products expose XSS in common HTML files: CalendarXP FlatCalendarXP ≤ 9.9.290 via iflateng.htm/nflateng.htm and CalendarXP PopCalendarXP ≤ 9.8.308 via ipopeng.htm/npopeng.htm. Root cause: cross-site scripting in the affected HTML pages. Impact and exploitability details are documen...