Lucene search
HistoryJan 31, 2013 - 5:44 a.m.
CVE-2012-6527
cve-2012-6527
cross-site scripting
xss
my calendar
wordpress
vulnerability
web script
html
path_info
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected configurations
Node
joedolsonmy_calendarRange≤1.10.1
ORjoedolsonmy_calendarMatch1.1.0
ORjoedolsonmy_calendarMatch1.2.0
ORjoedolsonmy_calendarMatch1.2.1
ORjoedolsonmy_calendarMatch1.4.0
ORjoedolsonmy_calendarMatch1.4.1
ORjoedolsonmy_calendarMatch1.4.2
ORjoedolsonmy_calendarMatch1.4.3
ORjoedolsonmy_calendarMatch1.4.4
ORjoedolsonmy_calendarMatch1.4.5
ORjoedolsonmy_calendarMatch1.4.6
ORjoedolsonmy_calendarMatch1.4.7
ORjoedolsonmy_calendarMatch1.4.8
ORjoedolsonmy_calendarMatch1.4.9
ORjoedolsonmy_calendarMatch1.4.10
ORjoedolsonmy_calendarMatch1.5.0
ORjoedolsonmy_calendarMatch1.5.1
ORjoedolsonmy_calendarMatch1.5.2
ORjoedolsonmy_calendarMatch1.5.3
ORjoedolsonmy_calendarMatch1.5.4
ORjoedolsonmy_calendarMatch1.6.0
ORjoedolsonmy_calendarMatch1.6.1
ORjoedolsonmy_calendarMatch1.6.2
ORjoedolsonmy_calendarMatch1.6.3
ORjoedolsonmy_calendarMatch1.7.0
ORjoedolsonmy_calendarMatch1.7.1
ORjoedolsonmy_calendarMatch1.7.2
ORjoedolsonmy_calendarMatch1.7.3
ORjoedolsonmy_calendarMatch1.7.4
ORjoedolsonmy_calendarMatch1.7.6
ORjoedolsonmy_calendarMatch1.7.7
ORjoedolsonmy_calendarMatch1.7.8
ORjoedolsonmy_calendarMatch1.8.0
ORjoedolsonmy_calendarMatch1.8.1
ORjoedolsonmy_calendarMatch1.8.2
ORjoedolsonmy_calendarMatch1.8.3
ORjoedolsonmy_calendarMatch1.8.4
ORjoedolsonmy_calendarMatch1.8.5
ORjoedolsonmy_calendarMatch1.8.6
ORjoedolsonmy_calendarMatch1.8.7
ORjoedolsonmy_calendarMatch1.8.8
ORjoedolsonmy_calendarMatch1.8.9
ORjoedolsonmy_calendarMatch1.9.0
ORjoedolsonmy_calendarMatch1.9.1
ORjoedolsonmy_calendarMatch1.9.2
ORjoedolsonmy_calendarMatch1.9.3
ORjoedolsonmy_calendarMatch1.9.4
ORjoedolsonmy_calendarMatch1.9.5
ORjoedolsonmy_calendarMatch1.9.6
ORjoedolsonmy_calendarMatch1.9.7
ORjoedolsonmy_calendarMatch1.9.8
ORjoedolsonmy_calendarMatch1.10.0
wordpresswordpressMatch-
Related
patchstack
patchstack
WordPress My Calendar Plugin <= 1.10.1 - XSS
2013-01-30 00:00:00
nvd
nvd
CVE-2012-6527
2013-01-31 05:44:00
cvelist
cvelist
CVE-2012-6527
2013-01-31 02:00:00
wpvulndb
wpvulndb
My Calendar 1.10.2 - XSS in PATH_INFO Parameter
2014-09-29 06:04:41
prion
prion
Cross site scripting
2013-01-31 05:44:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Related for CVE-2012-6527