CVE:CVE-2004-1506
CNNVD:CNNVD-200412-1055
WebCalendar存在多个跨站脚本攻击（XSS）漏洞。远程攻击者可以通过（1）view_entry.php，（2）view_d.php，（3）usersel.php，（4）datesel.php，（5）trailer.php，或者（6）styles.php注入任意web脚本，正如使用img srg标签。
solution:Upgrade webcalendar webcalendar to a higher version than 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44,and avoid the version 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44