Filtered by vendor Luxsoft
Subscriptions
Filtered by product Luxcal
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-26799 | 1 Luxsoft | 1 Luxcal | 2025-07-28 | 9.8 Critical |
| A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to steal other users' data. | ||||
| CVE-2025-25221 | 1 Luxsoft | 2 Luxcal, Luxcal Web Calendar | 2025-07-21 | N/A |
| The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved. | ||||
| CVE-2021-45915 | 1 Luxsoft | 1 Luxcal | 2024-11-21 | 9.8 Critical |
| In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | ||||
| CVE-2021-45914 | 1 Luxsoft | 1 Luxcal | 2024-11-21 | 9.8 Critical |
| In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | ||||
Page 1 of 1.