Low severity3.5NVD Advisory· Published Dec 15, 2022· Updated Jun 17, 2026

CVE-2022-4522

Description

A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is e3715b2228ddefe00113296069969f9e184836da. It is recommended to upgrade the affected component. VDB-215902 is the identifier assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Calendarxp/Calendarxp
cpe:2.3:a:calendarxp:calendarxp:*:*:*:*:*:*:*:*
Range: <=10.0.1
Calendarxp/Popcalendarxpllm-fuzzy
Range: <=10.0.1
unspecified/CalendarXPv5
Range: 10.0.0

Patches

Vulnerability mechanics

References

github.com/victorwon/calendarxp/commit/e3715b2228ddefe00113296069969f9e184836danvdPatchThird Party Advisory
github.com/victorwon/calendarxp/releases/tag/10.0.2nvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000