Unscored severity · published Mar 19, 2014
CVE-2013-5953
Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) calid or (2) paletteDefault parameter in an editevent action to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Com Multicalendar · Codepeople
through 4.8.5; 4.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5953
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0276.html
packetstormsecurity.com
http://packetstormsecurity.com/files/125738
Vendor Advisory
http://secunia.com/advisories/57360
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/91820