Most recent entries from all

EUVD-2026-163552

fkie_cve-2009-3021

Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-3jjj-2fhq-8hwq

gsd-2009-3021

jvndb-2009-000055

Site Calendar 'mycaljp' contains a cross-site scripting vulnerability. Site Calendar 'mycaljp' is a calendar plugin for Geeklog, which is an open source content management system. Site Calendar 'mycaljp' contains a cross-site scripting vulnerability. The affected plugin is also contained in the following packages: * Japanese extended package of Geeklog versions 1.5.0 through 1.5.2 Only packages released on or before June 29, 2009 are affected. For more information, refer to the developers' website. Masako Oono reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.