CVE-2017-10840

Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8Issue Tracking, Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN23340457/index.htmlThird Party Advisory, VDB Entry
• https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8Issue Tracking, Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN23340457/index.htmlThird Party Advisory, VDB Entry

Published

Aug 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10835"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earl…
• CVE-2017-10836Untrusted search path vulnerability in Optimal Guard 1.1.21 …
• CVE-2017-10837Cross-site scripting vulnerability in BackupGuard prior to v…6.1
• CVE-2017-10838Cross-site scripting vulnerability in SEO Panel prior to ver…
• CVE-2017-10839SQL injection vulnerability in the SEO Panel prior to versio…
• CVE-2017-1084In FreeBSD before 11.2-RELEASE, multiple issues with the imp…
• CVE-2017-10841Directory traversal vulnerability in WebCalendar 1.2.7 and e…
• CVE-2017-10842SQL injection vulnerability in the baserCMS 3.0.14 and earli…
• CVE-2017-10843baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allow…
• CVE-2017-10844baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an att…
• CVE-2017-10845Wi-Fi STATION L-02F Software version V10g and earlier allows…
• CVE-2017-10846Wi-Fi STATION L-02F Software version V10b and earlier allows…