Olat

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-6794 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers to inject arbitrary web script or HTML via the Location field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Olat

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

1.5%

CVE-2013-6793 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Olat

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

8.3%

CVE-2013-6794

EPSS 2% CVSS 4.3

MEDIUM POC This Month

XSS Olat

NVD Exploit-DB

CVE-2013-6793

EPSS 8% CVSS 4.3

MEDIUM POC This Month

XSS Olat

NVD Exploit-DB