Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-52133

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

Description

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xwiki-contrib Mocca Calendar

Default version status: unaffected

  • 0 to < 2.15affected

References