CVE-2013-1421

Published: Apr 22, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php.

Affected (16)

Products: Webcalendar Project: Webcalendar

Webcalendar Project

1 product

Webcalendar

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Webcalendar Project Webcalendar	Up to 1.2.4
Webcalendar Project Webcalendar	Version 1.0 rc1
Webcalendar Project Webcalendar	Version 1.0 rc2
Webcalendar Project Webcalendar	Version 1.0 rc3
Webcalendar Project Webcalendar	Version 1.1.1
Webcalendar Project Webcalendar	Version 1.1.2
Webcalendar Project Webcalendar	Version 1.1.3
Webcalendar Project Webcalendar	Version 1.1.4
Webcalendar Project Webcalendar	Version 1.1.5
Webcalendar Project Webcalendar	Version 1.1.6
Webcalendar Project Webcalendar	Version 1.2.0
Webcalendar Project Webcalendar	Version 1.2.1
Webcalendar Project Webcalendar	Version 1.2.2
Webcalendar Project Webcalendar	Version 1.2.3
Webcalendar Project Webcalendar	Version 1.2.6
Webcalendar Project Webcalendar	Version 1.2 b1