CVE-2009-4804

Mario Matzulla Calendar Base < 1.1.0 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."

References (4)

[Vendor Advisory] http://secunia.com/advisories/34155

[Various Sources] http://typo3.org/extensions/repository/view/cal/1.1.1/

[Vendor Advisory] http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/

[Patch] http://www.securityfocus.com/bid/33996

Scores

EPSS 0.0031

EPSS Percentile 53.8%

Classification

CWE

CWE-79

Status published

Affected Products (29)

mario_matzulla/calendar_base < 1.1.0

mario_matzulla/calendar_base

... and 14 more

Timeline

Published Apr 23, 2010

Tracked Since Feb 18, 2026