TI-2014-06074 CVE-2014-7291 · GHSA-7q5v-6j85-72x2Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare…Priority LOW 22Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare LibCal 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) m or (2) cid parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01148 · Published 2014-12-01 · No fix listed CWE-79