Lucene search

K
vulnrichmentJpcertVULNRICHMENT:CVE-2023-47175
HistoryNov 20, 2023 - 4:47 a.m.

CVE-2023-47175

2023-11-2004:47:17
jpcert
github.com
1
cve-2023-47175
cross-site scripting
luxcal web calendar
5.2.4m
mysql
5.2.4l
sqlite
remote attacker
unauthenticated
arbitrary script

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-47175