Skip to content
OpenAdvisories
High · 7.3 CVE-2025-25221 EUVD-2025-4854GHSA-x552-j8v3-6gpf

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf…

Published Feb 18, 2025 · Updated Feb 18, 2025 · Assigned by jpcert

Description

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.

Affected products

VendorProductAffectedFixed
LuxSoft The LuxCal Web Calendar prior to 5.3.3M (MySQL version), prior to 5.3.3L (SQLite version) —

References