VULNERABILITY INTELLIGENCE
CVE-2006-1336
CVSS score5 MEDIUM
EPSS probability6.72%
CISA KEVNot currently listed
Published2006-03-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters.