Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active which can be used to perform further attacks such as reading browser history directory listings and file contents.