Skip to content
OpenAdvisories
Unscored DSA-1279-1 1 CVE

webcalendar - missing input sanitising

Published Apr 22, 2007 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 webcalendar 0.9.45-4sarge7

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers…