CVE-2023-39939

CRITICAL · CVSS 9.1 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-08-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-39939

Severity

CRITICAL

CVSS

9.1

EPSS

0.70%

Original NVD Description

SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it.