CVE-2005-2882: Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier ver...

Security readout for executives and security teams

CVE-2005-2882 is a set of cross-site scripting issues in phpCommunityCalendar 4.0.3 and possibly earlier versions. An attacker could inject script or HTML through several calendar parameters, potentially affecting users who view crafted calendar pages. The sources do not provide CVSS scoring or a confirmed fixed version. Exposure is most likely where phpCommunityCalendar 4.0.3 or earlier is still reachable on a public or internal web server. The CVE lists affected vendor and product metadata as n/a, so teams should validate by application files, page names, and version banners rather than CPE matching alone. Prioritize remediation if this application is internet-facing or used by authenticated employees. The business risk is lower than remote code execution, but legacy XSS can still enable account abuse, phishing, or session compromise in exposed web workflows. Mitigation focus: Inventory and retire any phpCommunityCalendar deployments no longer needed.; Check archived vendor or project guidance for a fixed release.; Restrict access to affected calendar pages until remediation is confirmed..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.