TI-2009-04560 CVE-2009-4804 · GHSA-pj5p-vp8q-c483Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before…Priority LOW 22Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameter…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01033 · Published 2010-04-23 · No fix listed CWE-79