Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-0930

Reflected Cross-Site Scripting (XSS) vulnerability in TeamCal Neo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lewe TeamCal Neo

Default version status: unaffected

  • 3.8.2affected

References