CVE-2021-27330: Triconsole Datepicker Calendar

Medium severity, CVSS 6.1. EPSS: 6.2% chance of exploitation in the next 30 days.

Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.

Affected products

• Triconsole Datepicker Calendar: before 3.77 (fixed in 3.77)

Published 2021-02-25. Last modified 2026-06-17.