Davical Davical
3 CVEs affecting Davical Davical. Latest disclosed: 2019-12-12. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18345 | Critical | 9.3 | 2019-12-12 | A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the… |
CVE-2019-18346 | High | 8.8 | 2019-12-04 | A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests… |
CVE-2019-18347 | Medium | 5.4 | 2019-12-04 | A stored XSS issue was discovered in DAViCal through 1.1.8. It does not adequately sanitize output of various fields that can be set by unprivileged users, mak… |