CVE-2014-8586

2014-11-0415:55:06

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-8586

sql injection

cp multi view event calendar

wordpress

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.109 Low

EPSS

Percentile

95.2%

JSON

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Affected configurations

NVD

Node

cp_multi_view_event_calendar_projectcp_multi_view_event_calendarMatch1.0.1wordpress

CPENameOperatorVersion
cp_multi_view_event_calendar_project:cp_multi_view_event_calendarcp multi view event calendar project cp multi view event calendareq1.0.1