Unscored CVE-2021-20725 EUVD-2021-8139GHSA-62qp-vfx5-7cj5

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker t…

Published May 24, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: PHP Factory Product: [Calendar01] free edition

Description

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
PHP Factory	[Calendar01] free edition	ver1.0.1 and earlier	—

References

https://www.php-factory.net/calendar/01.php
https://jvn.jp/en/jp/JVN53910556/index.html