Filtered by vendor Triconsole Subscriptions
Filtered by product Datepicker Calendar Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-27330 1 Triconsole 1 Datepicker Calendar 2024-08-03 6.1 Medium
Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.