High severity8.8NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-47609

Description

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oss Calendar/Oss Calendar
cpe:2.3:a:oss-calendar:oss_calendar:*:*:*:*:*:*:*:*
Range: <2.0.3
Jw Calendar/Jw Calendarllm-fuzzy
Range: <2.0.3
Thinkingreed Inc./Oss Calendarv5
Range: prior to v.2.0.3

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN67822421/nvdThird Party Advisory
oss-calendar.com/news/20231113/nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000