CVE-2018-11628

EMS Master Calendar before 8.0.0.201805210 is affected by a cross-site scripting (XSS) vulnerability where data input via URL parameters is not properly sanitized. Root cause: insufficient input filtering in the web application, enabling a crafted URL to execute script in a user’s browser. Docume...