Lucene search
PRIOn knowledge basePRION:CVE-2024-0855HistoryFeb 27, 2024 - 9:15 a.m.
Code injection
2024-02-2709:15:00
PRIOn knowledge base
www.prio-n.com
7
code injection
spiffy calendar
wordpress
plugin
vulnerability
event_author parameter
user alteration
deceiving
contributor+
The Spiffy Calendar WordPress plugin before 4.9.9 doesn’t check the event_author parameter, and allows any user to alter it when creating an event, leading to deceiving users/admins that a page was created by a Contributor+.
Related
wpexploit
wpexploit
Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-02 00:00:00
wpvulndb
wpvulndb
Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-02 00:00:00
cvelist
cvelist
CVE-2024-0855 Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-27 08:30:29
nvd
nvd
CVE-2024-0855
2024-02-27 09:15:37
cve
cve
CVE-2024-0855
2024-02-27 09:15:37