Postnuke Software Foundation Postcalendar vulnerabilities

2 vulnerabilities

Known vulnerabilities in Postnuke Software Foundation Postcalendar, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2004-1787postnuke_software_foundationpostcalendar
EPSS score
1.33%
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.7.5CVE-2002-0739postnuke_software_foundationpostcalendar
EPSS score
1.77%
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.