Vulnerabilities (CVE)

Filtered by vendor Luxsoft Subscribe
Filtered by product Luxcal Web Calendar
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-47175 1 Luxsoft 1 Luxcal Web Calendar 2023-11-25 N/A 6.1 MEDIUM
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.
CVE-2023-39543 1 Luxsoft 1 Luxcal Web Calendar 2023-08-25 N/A 6.1 MEDIUM
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product.