Medium severity6.1NVD Advisory· Published Feb 25, 2021· Updated Jun 17, 2026
CVE-2021-27330
CVE-2021-27330
Description
Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<3.77+ 2 more
- (no CPE)range: <3.77
- cpe:2.3:a:triconsole:datepicker_calendar:*:*:*:*:*:*:*:*range: <3.77
- (no CPE)
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/161570/Triconsole-3.75-Cross-Site-Scripting.htmlnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/49597nvdExploitThird Party Advisory
- www.triconsole.comnvdProduct
- www.triconsole.com/php/calendar_datepicker.phpnvdProduct
News mentions
0No linked articles in our index yet.