PT-2025-31765 · Unknown · Mocca Calendar

Chiuchiusorin · CVE-2025-52132 · Published 2025-08-03 · Updated 2025-08-03

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mocca Calendar versions prior to 2.15

Description The Mocca Calendar application is susceptible to a cross-site scripting (XSS) issue. This issue occurs through manipulation of the title field when viewing an event page.

Recommendations Update Mocca Calendar to version 2.15 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-07562

CVE-2025-52132

GHSA-FJV4-PGH9-JFGC

Affected Products

Mocca Calendar

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52132.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-52132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52132 · Security Note
• https://bdu.fstec.ru/vul/2026-07562 · Security Note
• https://github.com/xwiki-contrib/application-mocca-calendar · Note
• https://github.com/xwikisas/application-mocca-calendar · Note
• https://github.com/xwikisas/application-mocca-calendar/security/advisories/GHSA-fjv4-pgh9-jfgc · Note
• https://t.me/CVEtracker/29045 · Telegram Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-31765 · Note
• https://extensions.xwiki.org/xwiki/bin/view/Extension/MoccaCalendar · Note
• https://t.me/cveNotify/130696 · Telegram Post
• https://twitter.com/CVEnew/status/1951847498605081060 · Twitter Post