CVE-2014-7291
Beschrijving NL
Meerdere cross-site scripting (XSS) kwetsbaarheden in api_events.php in Springshare LibCal 2.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) m of (2) cid parameter.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare LibCal 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) m or (2) cid parameter.