CVE-2025-62752

Name of the Vulnerable Software and Affected Versions kalender.Digital Calendar.Online / Kalender.Digital versions through 1.0.11

Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting (XSS) condition. Specifically, the issue manifests as a DOM-Based XSS. The vulnerability exists in the way the application processes user-supplied data when constructing web pages. This could allow an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update kalender.Digital Calendar.Online / Kalender.Digital to a version later than 1.0.11.