CVE-2017-9072 | BDVDB-2026-85589 Detail

Description#

Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/102632
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
https://github.com/victorwon/calendarxp/issues/2

Exploit#

No public exploit known

History#

Version 12017-05-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.