Description
Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php.
References
- http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen
- http://xoops.peak.ne.jp/md/news/
- JVNDB-2009-000013 third-party-advisory
- 33986 third-party-advisory
- 33896 vdb-entry
- JVN#91591874 third-party-advisory