CVE-2014-7291 | BDVDB-2026-66456 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare LibCal 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) m or (2) cid parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2014/Nov/90
https://exchange.xforce.ibmcloud.com/vulnerabilities/99000
http://tetraph.com/security/cves/cve-2014-7291-springshare-libcal-xss-cross-site-scripting-vulnerability/

Exploit#

No public exploit known

History#

Version 12014-12-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.