CVE-2021-20725
Assigner: jpcert
Published: 2021-05-24T03:20:31
State: PUBLISHED
affected: product: [Calendar01] free edition
vendor: PHP Factory
versions: status: affected
version: ver1.0.1 and earlier
descriptions: value: Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
problemTypes: descriptions: description: Cross-site scripting
type: text