Cross-site Scripting (XSS) Vulnerability in Calendarista Basic Edition

CVE-2024-27993

What is CVE-2024-27993?

An improper neutralization of input during webpage generation in Typps Calendarista Basic Edition, specifically in versions extending to 3.0.2, creates a susceptibility to cross-site scripting attacks. This vulnerability enables attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive user data and leading to unauthorized actions on behalf of the users. Web administrators using the affected versions are urged to review their implementation and apply appropriate security measures to mitigate this risk.

References