What’s Vulnerable › Vulnerabilities

CVE-2014-7291

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-12-01 · updated 2026-06-17
• Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare LibCal 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) m or (2) cid parameter.

Affected products

• Springshare Libcal: 2.0

References

• http://seclists.org/fulldisclosure/2014/Nov/90
• http://tetraph.com/security/cves/cve-2014-7291-springshare-libcal-xss-cross-site-scripting-vulnerability/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99000
• http://seclists.org/fulldisclosure/2014/Nov/90
• http://tetraph.com/security/cves/cve-2014-7291-springshare-libcal-xss-cross-site-scripting-vulnerability/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99000

Get alerted when CVE-2014-7291 or the next vulnerability affects your stack