Cross site scripting

2018-10-0123:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.

CPENameOperatorVersion
holiday_calendarlt1.11.3

CPE	Name	Operator	Version
	holiday_calendar	lt	1.11.3

References

seclists.org/fulldisclosure/2015/Jul/125

wordpress.org/plugins/the-holiday-calendar/