Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Scriptsez.net虚拟日历多个跨站脚本攻击漏洞
Vulnerability Description
Scriptsez.net虚拟日历中存在多个跨站脚本攻击漏洞。远程攻击者当m参数超过预设的范围时,可以借助(1)t参数和(2)yr参数,以及(3)sho参数,注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A