{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-02-25T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-04-22T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/"}, {"name": "90669", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/90669"}, {"tags": ["x_refsource_MISC"], "url": "http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-1421", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/", "refsource": "CONFIRM", "url": "http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/"}, {"name": "90669", "refsource": "OSVDB", "url": "http://osvdb.org/90669"}, {"name": "http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/", "refsource": "MISC", "url": "http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T15:04:47.883Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/"}, {"name": "90669", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/90669"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-1421", "datePublished": "2014-04-22T14:00:00", "dateReserved": "2013-01-26T00:00:00", "dateUpdated": "2024-08-06T15:04:47.883Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:*:*:*:*:*:*:*:*", "matchCriteriaId": "843C5AA0-7B4A-4524-81F5-3BF648DA5F8F", "versionEndIncluding": "1.2.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "9C15E268-8EB4-47A8-90DC-CD69CD50A841", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "91FEC4D3-4834-4280-8303-17DB2AFF5B02", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "A495A3A9-D5D4-4520-BD08-E1ED14739011", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0A080963-2939-4A64-AB20-88BCAE38493D", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4C91371D-782F-4F37-ACA2-DDCBCA07EADA", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "05214A0F-8AF1-411D-A95D-C27E30DDDB90", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "F0C4150C-F794-43E8-8830-306256B762A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "7936AA3F-AF11-450E-B4C4-01435362A8BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "CE4761E3-3CC3-415C-B465-81D027A8873F", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2:b1:*:*:*:*:*:*", "matchCriteriaId": "131F1948-C0F4-474B-B56B-B5F475B1E1A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "1BE8D526-A7ED-4AAA-9B55-81AFA5761848", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5E2AE19F-7C9B-4AB3-8E7F-8FA7EDE0125F", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "8810AF0D-2304-43B7-9507-DD429587E975", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "EE45F7F3-C367-4E0C-973E-43907482B696", "vulnerable": true}, {"criteria": "cpe:2.3:a:webcalendar_project:webcalendar:1.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "AB7C9928-8A71-4C39-A690-9E19780E5A52", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php."}, {"lang": "es", "value": "Vulnerabilidad de XSS en Craig Knudsen WebCalendar anterior a 1.2.5, 1.2.6 y otros versiones anteriores a 1.2.7 permite a atacantes remotos inyectar script Web o HTML arbitrarios a trav\u00e9s del campo Category Name hacia category.php."}], "id": "CVE-2013-1421", "lastModified": "2020-01-29T19:18:43.267", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2014-04-22T14:23:31.753", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/90669"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}