Vulnerabilities > Kkcald Project > Kkcald > 0.7.21
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-02-01 | CVE-2018-0509 | Cross-Site Request Forgery (CSRF) vulnerability in Kkcald Project Kkcald 0.7.19/0.7.21 Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors. | 8.8 |
2018-02-01 | CVE-2018-0508 | Cross-site Scripting vulnerability in Kkcald Project Kkcald 0.7.19/0.7.21 Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. | 6.1 |