Description (CNA)
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| xwiki-contrib / Mocca Calendar | affected 0 before 2.15 |
CWE
CWE-79
References
- https://github.com/xwikisas/application-mocca-calendar
- https://github.com/xwikisas/application-mocca-calendar/security/advisories/GHSA-fjv4-pgh9-jfgc
- https://extensions.xwiki.org/xwiki/bin/view/Extension/MoccaCalendar
- https://github.com/xwiki-contrib/application-mocca-calendar
ADP enrichment
No English description supplied.
No references supplied.