Description (CNA)
The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| xwiki-contrib / Mocca Calendar | affected 0 before 2.15 |
CWE
CWE-79
References
- https://github.com/xwikisas/application-mocca-calendar/security/advisories/GHSA-jvq4-j2qw-q7x2
- https://github.com/xwikisas/application-mocca-calendar
- https://extensions.xwiki.org/xwiki/bin/view/Extension/MoccaCalendar
- https://github.com/xwiki-contrib/application-mocca-calendar
ADP enrichment
No English description supplied.
No references supplied.