WebCalendar Project WebCalendar
Approved changes feed: RSS · Atom
cpe:2.3:a:webcalendar_project:webcalendar:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Webcalendar Project (926e7c45-ef1a-5572-8478-98d54b3088b6) |
|---|---|
| Product | Webcalendar (f146eff9-03e0-5d86-9f57-1ae7b2874bfa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/craigk5n/webcalendar |
purl2cpe | 2026-06-01 10:12:43.682237 |
pkg:rpm/fedora/webcalendar |
purl2cpe | 2026-06-01 10:12:43.682240 |
pkg:sourceforge/webcalendar |
purl2cpe | 2026-06-01 10:12:43.682243 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0289 |
vulnerable | 2026-06-08 05:52:04.699206 |
Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar
HIGH (7.6)
Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-04-07T15:34:55.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5384 |
vulnerable | 2026-06-08 05:02:56.365773 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the (1) $name or (2) $description variables in edit_entry_handler.php, or (3) $url, (4) $tempfullname, or (5) $ext_users[] variables in view_entry.php, different vectors than CVE-2012-0846.
Published: 2012-10-11T15:00:00.000Z
Updated: 2024-09-16T17:54:02.895Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.