CVE-2023-39543: XSS
Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID for this vulnerability?
The CVE ID for this vulnerability is CVE-2023-39543.
What is the severity of CVE-2023-39543?
The severity of CVE-2023-39543 is medium.
What is the affected software?
The affected software is LuxCal Web Calendar prior to version 5.2.3M (MySQL version) and LuxCal Web Calendar prior to version 5.2.3L (SQLite version).
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by executing an arbitrary script on the web browser of an unauthenticated user.
Are there any references related to this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [JVN04876736](https://jvn.jp/en/jp/JVN04876736/), [Luxsoft](https://www.luxsoft.eu/), [Download](https://www.luxsoft.eu/?download).