CVE-2025-52133

Impact

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References

• NVD record
• CVE.org record
• https://extensions.xwiki.org/xwiki/bin/view/Extension/MoccaCalendar
• https://github.com/xwiki-contrib/application-mocca-calendar
• https://github.com/xwikisas/application-mocca-calendar
• https://github.com/xwikisas/application-mocca-calendar/security/advisories/GHSA-mc3x-h7p6-334p