CVE-2013-1955

Published: Jul 20, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (14)

Products: Nashtech: Easy Php Calendar

Nashtech

1 product

Easy Php Calendar

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Nashtech Easy Php Calendar	Up to 7.0.12
Nashtech Easy Php Calendar	Version 6.0
Nashtech Easy Php Calendar	Version 7.0.00
Nashtech Easy Php Calendar	Version 7.0.01
Nashtech Easy Php Calendar	Version 7.0.02
Nashtech Easy Php Calendar	Version 7.0.03
Nashtech Easy Php Calendar	Version 7.0.04
Nashtech Easy Php Calendar	Version 7.0.05
Nashtech Easy Php Calendar	Version 7.0.06
Nashtech Easy Php Calendar	Version 7.0.07
Nashtech Easy Php Calendar	Version 7.0.08
Nashtech Easy Php Calendar	Version 7.0.09
Nashtech Easy Php Calendar	Version 7.0.10
Nashtech Easy Php Calendar	Version 7.0.11