Unscored severity · published Jul 20, 2013
CVE-2013-1955
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Easy Php Calendar · Nashtech
through 7.0.12; 6.0; 7.0.00; 7.0.01; 7.0.02; 7.0.03; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1955
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1955
Vendor Advisory
http://docs7.easyphpcalendar.com/source/ChangeLog/changeLog.htm
www.easyphpcalendar.com
http://www.easyphpcalendar.com/forums/showthread.php?p=4555
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/04/16/6
More from Easy Php Calendar
–
CVE-2008-7018
Cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field (descr…