CveMateVulnerability intelligence

Calendarxp vulnerabilities

2 vulnerabilities

Known vulnerabilities in Calendarxp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

Products

3

Calendarxp1 vulnerabilities
Flatcalendarxp1 vulnerabilities
Popcalendarxp1 vulnerabilities

CVE-2022-4522calendarxpcalendarxp+13y ago15-12-2022 00:00

A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is e3715b2228ddefe00113296069969f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulnerability.CVE-2017-9072calendarxpflatcalendarxp+19y ago18-05-2017 17:00

Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm.