CVE-2017-10840

Publication date

2017-08-28 20:00:00

Family

jpcert

State

PUBLISHED

Description

Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.