CVE-2024-1274

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks depending on the permissions set by the admin...

CVE-2024-1274

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks depending on the permissions set by the admin...

CVE-2024-1274

The My Calendar WordPress plugin is vulnerable to Authenticated Stored Cross-Site Scripting (XSS) in versions prior to 3.4.24 . The root cause is the failure to properly sanitise and escape certain parameters. This flaw allows users with a role as low as Subscriber to perform XSS attacks, dependi...