CVE-2023-39543

Summary

CVE-2023-39543 is a cross-site scripting (XSS) vulnerability affecting LuxCal Web Calendar versions prior to 5.2.3M for MySQL and 5.2.3L for SQLite. An attacker can exploit this issue to inject and execute malicious scripts in the web browsers of unsuspecting users, without requiring authentication. This poses a serious risk to data confidentiality and integrity for those using the affected software. It is highly recommended that users upgrade to the latest versions of LuxCal Web Calendar to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.