Vulnerability Details CVE-2022-4455
A vulnerability was identified in sproctor php-calendar up to 2.0.13. This impacts an unknown function of the file index.php. Such manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be launched remotely. The name of the patch is a2941109b42201c19733127ced763e270a357809. It is advisable to implement a patch to correct this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.6%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 4.0
References
Products affected by CVE-2022-4455
-
cpe:2.3:a:php-calendar:php-calendar:-
-
cpe:2.3:a:php-calendar:php-calendar:0.1
-
cpe:2.3:a:php-calendar:php-calendar:0.10
-
cpe:2.3:a:php-calendar:php-calendar:0.2
-
cpe:2.3:a:php-calendar:php-calendar:0.3
-
cpe:2.3:a:php-calendar:php-calendar:0.4
-
cpe:2.3:a:php-calendar:php-calendar:0.5
-
cpe:2.3:a:php-calendar:php-calendar:0.6
-
cpe:2.3:a:php-calendar:php-calendar:0.7
-
cpe:2.3:a:php-calendar:php-calendar:0.8
-
cpe:2.3:a:php-calendar:php-calendar:0.9
-
cpe:2.3:a:php-calendar:php-calendar:0.9.1
-
cpe:2.3:a:php-calendar:php-calendar:2015-12-04