CVE-2007-5952
Helios Calendar 1.2.1 Beta - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Ivan Sanchez · textwebappsphp
https://www.exploit-db.com/exploits/30734
Scores
EPSS
0.0152
EPSS Percentile
81.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
helioscalendar/helios_calendar
Timeline
Published
Nov 14, 2007
Tracked Since
Feb 18, 2026