Skip to content
OpenAdvisories

Vendor

craigk5n

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.6

    Stored XSS in craigk5n/webcalendar

    A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can inject malicious scripts, which are then executed in the con…

  • High 7.6

    Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

    Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.