Description
Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags.
References
- ADV-2006-0149 vdb-entry
- calogic-newevent-xss(24077) vdb-entry
- 20060116 [eVuln] CaLogic Calendars Multiple XSS Vulnerabilities mailing-list
- 16206 vdb-entry
- 22322 vdb-entry
- 18417 third-party-advisory
- http://evuln.com/vulns/24/summary.html