medium4.3
CVE-2011-3254
Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation not…
Impact
Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | Versions 4.2, 4.2.1, 4.2.5, 4.2.8, 4.2.9, 4.3.0 |