Triconsole: >> Datepicker Calendar Security Vulnerabilities
Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.
CVSS Score
6.1
EPSS Score
0.224
Published
2021-02-25