CVE Daily

CVE-2025-52131

The Mocca Calendar application before 2.15 for XWiki allows XSS via the backgrou...

Medium CVSS 6.4

Overview

The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.

CWE: CWE-79 Published: 2025-08-03T04:15:37.940
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.4 (MEDIUM)
  • Detected tags: xss (tag impact: MODERATE)

Recommended actions:

  • Apply context-aware output encoding.
  • Enable Content-Security-Policy and HttpOnly/SameSite cookies.

Recommended tools

Tags