CVE-2023-0289

Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.

Affected

craigk5n · craigk5n/webcalendar

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v3.0 HUNTR

7.6 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS

0.53% chance of exploitation in the next 30 days, 43rd percentile

Published

2023-01-13

Updated

2025-04-07

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/b9584c87-60e8-4a03-9e79-5f1e2d595361

Security advisories

• craigk5n/webcalendar/commit/7906b4924c2dc3727c3540682f432ebbb93f810d

References

• CVE Record
• NVD entry