CVE-2026-77838: XSS
Published Aug 28, 2026
·Updated
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.
Event History
Aug 28, 2026
CVE Published
via MITRE·06:10 AM
Data Sourced
via MITRE·06:10 AM
DescriptionSeverity
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs at least low-level privileges and must induce a user to interact with malicious content. Successful exploitation executes arbitrary script in the browser of a user logging in to SOY Calendar.
2
What is the likely impact if exploitation succeeds?
The issue can affect confidentiality and integrity, and its scope is changed. The provided CVSS vector indicates no availability impact.