K5n.us Webcalendar
2 CVEs affecting K5n.us Webcalendar. Latest disclosed: 2017-08-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10840 | Medium | 6.1 | 2017-08-29 | Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2017-10841 | Medium | 4.9 | 2017-08-29 | Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors. |