CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.2%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

https://jvn.jp/en/jp/JVN53910556/index.html
https://www.php-factory.net/calendar/01.php
https://jvn.jp/en/jp/JVN53910556/index.html
https://www.php-factory.net/calendar/01.php

Products affected by CVE-2021-20725

Calendar01 Project » Calendar01 » Version: N/A

cpe:2.3:a:calendar01_project:calendar01:-
Calendar01 Project » Calendar01 » Version: 1.0.0

cpe:2.3:a:calendar01_project:calendar01:1.0.0
Calendar01 Project » Calendar01 » Version: 1.0.1

cpe:2.3:a:calendar01_project:calendar01:1.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-20725

Products

Pricing

Contact Us