VendorsWebCalendar Projectwebcalendar1.2.7
Vulnerabilities

WebCalendar Project WebCalendar 1.2.7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2017-10840
Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Published 2017-08-28 · Modified
6.1EPSS 0.009
CVE-2017-10841
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
Published 2017-08-28 · Modified
4.9EPSS 0.024