VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 20, 2023· Updated Jun 17, 2026

CVE-2023-47175

CVE-2023-47175

Description

Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Luxsoft/Luxcal Web Calendar2 versions
    cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:sqlite:*:*:*+ 1 more
    • cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:sqlite:*:*:*range: <5.2.4l
    • cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:mysql:*:*:*range: <5.2.4m
  • Luxsoft/The Luxcal Web Calendarcpe-rescue2 versions
    prior to 5.2.4L (SQLite version)+ 1 more
    • (no CPE)range: prior to 5.2.4L (SQLite version)
    • (no CPE)range: <5.2.4M (MySQL), <5.2.4L (SQLite)
  • LuxCal/LuxCal Web Calendarllm-create
    Range: <5.2.4M (MySQL), <5.2.4L (SQLite)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.