Lucene search
HistoryNov 30, 2023 - 4:15 p.m.
CVE-2023-6360
wordpress
plugin
sql injection
cve-2023-6360
unauthenticated vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
80.7%
The ‘My Calendar’ WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the ‘from’ and ‘to’ parameters in the ‘/my-calendar/v1/events’ rest route.
Affected configurations
Node
joedolsonmy_calendarRange<3.4.22wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joedolson | my_calendar | * | cpe:2.3:a:joedolson:my_calendar:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
My Calendar < 3.4.22 - Unauthenticated SQL Injection
2023-12-23 00:00:00
cvelist
cvelist
CVE-2023-6360
2023-11-30 15:17:14
cve
cve
CVE-2023-6360
2023-11-30 16:15:11
nuclei
nuclei
WordPress My Calendar <3.4.22 - SQL Injection
2024-01-31 11:07:22
prion
prion
Sql injection
2023-11-30 16:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
80.7%
Related for NVD:CVE-2023-6360