PT-2025-31765 · Unknown · Mocca Calendar

Chiuchiusorin · Published 2025-08-03 · Updated 2025-08-03 · CVE-2025-52132

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mocca Calendar versions prior to 2.15

Description The Mocca Calendar application is susceptible to a cross-site scripting (XSS) issue. This issue occurs through manipulation of the title field when viewing an event page.

Recommendations Update Mocca Calendar to version 2.15 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-07562

CVE-2025-52132

GHSA-FJV4-PGH9-JFGC

Affected Products

Mocca Calendar

References · 11

• https://bdu.fstec.ru/vul/2026-07562 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52132 · Security Note
• https://github.com/xwiki-contrib/application-mocca-calendar · Note
• https://github.com/xwikisas/application-mocca-calendar · Note
• https://github.com/xwikisas/application-mocca-calendar/security/advisories/GHSA-fjv4-pgh9-jfgc · Note
• https://extensions.xwiki.org/xwiki/bin/view/Extension/MoccaCalendar · Note
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-31765 · Note
• https://twitter.com/CVEnew/status/1951847498605081060 · Twitter Post
• https://t.me/CVEtracker/29045 · Telegram Post
• https://t.me/cveNotify/130696 · Telegram Post