My Calendar, CVE-2024-25916

CVE, Research URL: CVE-2024-25916
Home page URL: Security reports for My Calendar
Application: My Calendar
Published on: Mar 15, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joseph C Dolson My Calendar allows Stored XSS.This issue affects My Calendar: from n/a through 3.4.23.
Affected versions: max 3.4.24.
Status: vulnerable