TI-2007-06072 CVE-2007-6365 · GHSA-23c9-m3p8-p7fqCross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event…Priority LOW 22Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2007-12-15 · No fix listed CWE-79