A vulnerability, which was classified as problematic, was found in sproctor php-calendar. This affects an unknown part of the file index.php. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is a2941109b42201c19733127ced763e270a357809. It is recommended to apply a patch to fix this issue. The identifier VDB-215445 was assigned to this vulnerability.
References
Link | Resource |
---|---|
https://github.com/sproctor/php-calendar/commit/a2941109b42201c19733127ced763e270a357809 | Patch Third Party Advisory |
https://vuldb.com/?id.215445 | Third Party Advisory |
Configurations
History
19 Dec 2022, 16:45
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-13 18:15
Updated : 2024-02-04 23:14
NVD link : CVE-2022-4455
Mitre link : CVE-2022-4455
CVE.ORG link : CVE-2022-4455
JSON object : View
Products Affected
php-calendar
- php-calendar