CVE-2020-5615: CALENDAR01 Project CALENDAR01

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

• CALENDAR01 Project CALENDAR01: version 1.0.0 only
• CALENDAR02 Project CALENDAR02: version 1.0.0 only

Published 2020-08-04. Last modified 2026-06-17.