Description
A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function.
Medium · 6.1
CVE-2025-45314
EUVD-2025-24624GHSA-qvqv-jrgg-7m2x
A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript…
Published Aug 13, 2025 · Updated Jul 5, 2026 · Assigned by mitre