Baremetrics Calendar
Approved changes feed: RSS · Atom
cpe:2.3:a:baremetrics:baremetrics-calendar:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Baremetrics (e9410517-a1b2-5477-a8e1-1917a23bb6cf) |
|---|---|
| Product | Baremetrics Calendar (33a20c30-828d-5046-9520-7d62a6854401) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32859 |
vulnerable | 2026-06-08 05:32:08.179004 |
Baremetrics date range picker vulnerable to Cross-site Scripting
MEDIUM (6.1)
The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who is able to influence the field `placeholder` when creating a `Calendar` instance is able to supply arbitrary `html` or `javascript` that will be rendered in the context of a user leading to XSS. There are no known patches for this issue.
Published: 2023-02-20T00:00:00.000Z
Updated: 2025-03-10T21:08:19.969Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.