Calendar01 Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-20725 May 24, 04:15 MEDIUM This Month

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Calendar01 Calendar01 Project

NVD

CVSS 3.1

6.1

EPSS

0.8%

CVE-2020-5616 Aug 04, 02:15 CRITICAL Act Now

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Calendar01 Calendar02 Calendarform01 Gallery01 +5

NVD

CVSS 3.1

9.8

EPSS

3.1%

CVE-2020-5615 Aug 04, 02:15 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Calendar01 Calendar02 Calendar01 Project

NVD

CVSS 3.1

8.8

EPSS

0.7%

CVE-2021-20725

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Calendar01 Calendar01 Project

NVD

CVE-2020-5616

EPSS 3% CVSS 9.8

CRITICAL Act Now

Authentication Bypass Calendar01 Calendar02 +7

NVD

CVE-2020-5615

EPSS 1% CVSS 8.8

HIGH This Week

CSRF Calendar01 Calendar02 +1

NVD