Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mva7 The Holiday Calendar the-holiday-calendar allows Stored XSS.This issue affects The Holiday Calendar: from n/a through <= 1.18.2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mva7 | The Holiday Calendar | ≤ 1.18.2.1 | — |