CVE-2005-4327

no score yetEPSS 1.7%

Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
Published: 2005-12-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

References

http://secunia.com/advisories/18017
http://securityreason.com/securityalert/267
http://www.securityfocus.com/archive/1/419655/100/0/threaded
http://www.securityfocus.com/bid/15917
http://secunia.com/advisories/18017

Check your stack JSON