VYPR

Olat

by Olat

CVEs (2)

  • CVE-2013-6793Nov 14, 2013
    risk 0.04cvss epss 0.08

    Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2) date field.

  • CVE-2013-6794Nov 14, 2013
    risk 0.03cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers to inject arbitrary web script or HTML via the Location field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.