K5n.us Webcalendar vulnerabilities

• k5n.us webcalendar Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers... CVE-2017-10841 4.9 MediumAugust 28, 2017
• k5n.us webcalendar Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject... CVE-2017-10840 6.1 MediumAugust 28, 2017