Vulnerability CVE-2022-4455


Published: 2022-12-13

Description:
A vulnerability, which was classified as problematic, was found in sproctor php-calendar. This affects an unknown part of the file index.php. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is a2941109b42201c19733127ced763e270a357809. It is recommended to apply a patch to fix this issue. The identifier VDB-215445 was assigned to this vulnerability.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://github.com/sproctor/php-calendar/commit/a2941109b42201c19733127ced763e270a357809
https://vuldb.com/?id.215445

Copyright 2026, cxsecurity.com

 

Back to Top