CVE-2021-27330

Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.

• CWE-79

• https://packetstormsecurity.com/files/161570/Triconsole-3.75-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• https://www.triconsole.com/Product
• https://www.triconsole.com/php/calendar_datepicker.phpProduct
• https://www.exploit-db.com/exploits/49597Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/161570/Triconsole-3.75-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• https://www.triconsole.com/Product
• https://www.triconsole.com/php/calendar_datepicker.phpProduct
• https://www.exploit-db.com/exploits/49597Exploit, Third Party Advisory

Published

Feb 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27317Cross Site Scripting (XSS) vulnerability in contactus.php in…6.1
• CVE-2021-27318Cross Site Scripting (XSS) vulnerability in contactus.php in…6.1
• CVE-2021-27319Blind SQL injection in contactus.php in Doctor Appointment S…7.5
• CVE-2021-27320Blind SQL injection in contactus.php in Doctor Appointment S…7.5
• CVE-2021-27328Yeastar NeoGate TG400 91.3.0.3 devices are affected by Direc…6.5
• CVE-2021-27329Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS …10
• CVE-2021-27332Cross-site scripting (XSS) vulnerability in SourceCodester C…6.1
• CVE-2021-27335KollectApps before 4.8.16c is affected by insecure Java dese…9.8
• CVE-2021-27338Faraday Edge before 3.7 allows XSS via the network/create/ p…5.4
• CVE-2021-27340OpenSIS Community Edition version <= 7.6 is affected by a re…6.1
• CVE-2021-27341OpenSIS Community Edition version <= 7.6 is affected by a lo…9.8
• CVE-2021-27342An authentication brute-force protection mechanism bypass in…5.9