CVE-2023-47175

published 2023-11-20

CVE-2023-47175: Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a…

Priority P4 27 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
luxsoft	luxcal_web_calendar	< 5.2.4l	5.2.4l
luxsoft	luxcal_web_calendar	< 5.2.4m	5.2.4m
luxsoft	luxcal_web_calendar	—	—
luxsoft	luxcal_web_calendar	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79