CVE-2026-73827

MediumCVSS 5.4

Published: 28/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed in the web browser of a user who is logged into the product.

Risk Assessment

An attacker can execute malicious script in the context of a logged-in user, potentially leading to session theft, account takeover, or other harmful actions.

Recommendation

Update SOY Calendar to the latest version that fixes the XSS vulnerability. Additionally, apply input filtering and output encoding mechanisms.

Other vulnerabilities in SOY Calendar

CVE-2026-77838Medium
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed in the web browser of a user who is logged into the product.

Original NVD description (English source)

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.