Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMS Master Calendar 跨站脚本漏洞
Vulnerability Description
EMS Master Calendar是美国EMS Software公司的一套日程管理系统。该系统主要提供日期、地点的即时访问功能 EMS Master Calendar 8.0.0.201805210之前版本中存在跨站脚本漏洞,该漏洞源于程序没有正确地过滤用户提交的输入数据。远程攻击者可通过发送特制的URL利用该漏洞在用户浏览器中执行任意脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A