Room 34 Creative Services vulnerabilities
We track 2 vulnerabilities in Room 34 Creative Services products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest Room 34 Creative Services vulnerabilities
- 7.1 High severity
ICS Calendar: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through <= 12.1.1.
- 8.2 High severity
ICS Calendar: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Server-Side Request Forgery (SSRF) vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Absolute Path Traversal, : Server Side Request Forgery.This issu