Lucene search
MitreCVELIST:CVE-2018-18872HistoryMay 13, 2019 - 1:04 p.m.
CVE-2018-18872
2019-05-1313:04:19
mitre
www.cve.org
0.001 Low
EPSS
Percentile
24.8%
The Kieran O’Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.
References
Related
wpvulndb
wpvulndb
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
2018-10-30 00:00:00
cve
cve
CVE-2018-18872
2019-05-13 14:29:00
prion
prion
Design/Logic Flaw
2019-05-13 14:29:00
nvd
nvd
CVE-2018-18872
2019-05-13 14:29:00
openvas
openvas
WordPress Calendar Plugin < 1.3.11 XSS Vulnerability
2019-05-15 00:00:00
wpexploit
wpexploit
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
2018-10-30 00:00:00