Known vulnerabilities in LuxCal Web Calendar

Vendor: LuxSoft
Software: LuxCal Web Calendar
Software CPE: cpe:2.3:a:luxsoft:luxcal_web_calendar:*:*:*:*:*:*:*:*
Website: https://www.luxsoft.eu/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LuxCal Web Calendar LuxCal Web Calendar is affected by 8 known vulnerabilities: 4 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104059 - Missing Authentication for Critical Function
CVE-2025-25224		 CWE-306 Medium
No
No
 5.3.3L, 5.3.3M 19.02.2025 SB202502197132
#VU104058 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-25223		 CWE-22 Medium
No
No
 5.3.3L, 5.3.3M 19.02.2025 SB202502197132
#VU104057 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-25222		 CWE-89 High
No
No
 5.3.3L, 5.3.3M 19.02.2025 SB202502197132
#VU104053 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-25221		 CWE-89 High
No
No
 5.3.3L, 5.3.3M 19.02.2025 SB202502197132
#VU83285 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47175		 CWE-79 Low
No
No
 5.2.4L, 5.2.4M 20.11.2023 SB2023112022
#VU83278 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-46700		 CWE-89 High
No
No
 5.2.4L, 5.2.4M 20.11.2023 SB2023112022
#VU80001 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39939		 CWE-89 High
No
No
 5.2.3L, 5.2.3M 25.08.2023 SB2023082512
#VU80000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39543		 CWE-79 Low
No
No
 5.2.3L, 5.2.3M 25.08.2023 SB2023082512