VULNERABILITY INTELLIGENCE
CVE-2007-6696
CVSS score2.1 LOW
EPSS probability1.73%
CISA KEVNot currently listed
Published2008-02-01
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description, (2) the query string to pref.php, and (3) the adv parameter to search.php. NOTE: vector 1 requires user authentication.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')