Description
Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting http/cves/2021/CVE-2021-27330.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.