Security Advisory
CVE-2021-45914
9.8
CRITICAL
Vulnerability Description
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.
Published Date
May 24, 2022
Official Source
NIST NVD Advisory