Lucene search
PRIOn knowledge basePRION:CVE-2018-18872HistoryMay 13, 2019 - 2:29 p.m.
Design/Logic Flaw
2019-05-1314:29:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
24.8%
The Kieran O’Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.
References
Related
cve
cve
CVE-2018-18872
2019-05-13 14:29:00
nvd
nvd
CVE-2018-18872
2019-05-13 14:29:00
wpvulndb
wpvulndb
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
2018-10-30 00:00:00
openvas
openvas
WordPress Calendar Plugin < 1.3.11 XSS Vulnerability
2019-05-15 00:00:00
wpexploit
wpexploit
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
2018-10-30 00:00:00
cvelist
cvelist
CVE-2018-18872
2019-05-13 13:04:19