CVE-2007-1111: Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to injec...

Security readout for executives and security teams

CVE-2007-1111 is an old cross-site scripting issue in ActiveCalendar 1.2.0. If a site still exposes the affected calendar scripts, an attacker could make a user’s browser run attacker-controlled script or HTML in that site’s context. The provided sources do not name a CVSS score, confirmed patch, or active exploitation. Exposure is likely limited to legacy sites that still deploy ActiveCalendar 1.2.0 and expose the listed data/ PHP scripts publicly or to authenticated users. Prioritize as a legacy web exposure cleanup item. It is not presented as actively exploited, but public-facing XSS can still create user, session, and brand risk if old software remains online. Mitigation focus: Inventory for ActiveCalendar 1.2.0 in all web roots and legacy applications.; Check vendor or project guidance for a fixed release or maintained replacement.; Restrict public access to affected data/ scripts if they are not required..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.