CVE-2018-11628

PoC —

CVSS 3.0

6.1 medium

EPSS

3%p88

Published

Jun 1, 2018 (Jun 1, 2018)

Modified

Jun 17, 2026

Description

Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS.

Vendors: emssoftware
Products: ems master calendar
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.