CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.1. It may be remotely exploitable.
CVE
CVE-2007-6696
Severity
LOW
CVSS
2.1
EPSS
1.73%
Original NVD Description
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description, (2) the query string to pref.php, and (3) the adv parameter to search.php. NOTE: vector 1 requires user authentication.