Unrated severityNVD Advisory· Published Oct 7, 2011· Updated Apr 29, 2026
CVE-2010-4880
CVE-2010-4880
Description
Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter.
Affected products
1- cpe:2.3:a:apphp:apphp_calendar:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.