Description
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
References
- 1014083 vdb-entry
- 16973 vdb-entry
- 20050531 multiple vulnerability Calendarix Advanced mailing-list