CVE-2021-27330

Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php

published February 25, 2021

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06196 · 93.5th percentile
Published
2021-02-25T15:11Z
EPSS history
Timeline
  • 25 FEB 15:11Z
    Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php
    cvelistv5