Cross site scripting

2017-06-0519:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

JSON

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.

CPENameOperatorVersion
spiffy_calendareq1.3.1
spiffy_calendareq1.1.8
spiffy_calendareq2.1.1
spiffy_calendareq3.1.2
spiffy_calendareq3.0.2
spiffy_calendareq3.1.3
spiffy_calendareq1.1.4
spiffy_calendareq1.1.3
spiffy_calendareq3.0.7
spiffy_calendareq1.2.0

Name	Operator	Version
spiffy_calendar	eq	1.3.1
spiffy_calendar	eq	1.1.8
spiffy_calendar	eq	2.1.1
spiffy_calendar	eq	3.1.2
spiffy_calendar	eq	3.0.2
spiffy_calendar	eq	3.1.3
spiffy_calendar	eq	1.1.4
spiffy_calendar	eq	1.1.3
spiffy_calendar	eq	3.0.7
spiffy_calendar	eq	1.2.0