Description
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
References
- 4563 vdb-entry
- postcalendar-calendar-event-css(8899) vdb-entry
- 20020420 Vulnerability in PostCalendar mailing-list