SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-59516

HIGH · CVSS 7.1 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The ICS Calendar application by Room 34 Creative Services is vulnerable to reflected cross-site scripting (XSS) due to improper input neutralization during web page generation. This vulnerability could allow attackers to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Organizations using affected versions of ICS Calendar should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-59516
Severity
HIGH
CVSS
7.1
EPSS
0.14%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through <= 12.1.1.