CVE-2008-3849
Civic Website Manager <1.0.1 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields.
References (5)
Scores
EPSS
0.0033
EPSS Percentile
55.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
civic-cms/civic-cms
< 1.0
Timeline
Published
Aug 27, 2008
Tracked Since
Feb 18, 2026