8 matches found
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
EUVD-2018-10583
Malware in sbrugna...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
CVE-2018-18872
The vulnerability CVE-2018-18872 affects the WordPress Kieran O’Shea Calendar plugin prior to 1.3.11. It enables Stored XSS via the event_title field in wp-admin/admin.php?page=calendar add action or via the category name during calendar-categories creation. Root cause is insufficient validation/...
PT-2019-9653
Name of the Vulnerable Software and Affected Versions Kieran O'Shea Calendar plugin versions prior to 1.3.11 Description The issue allows for Stored XSS attacks. This can occur through the event title parameter in a "wp-admin/admin.php?page=calendar" add action, or the category name during catego...
CVE-2018-18872: Improper Neutralization of Input During Web Page Generation
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
WordPress Kieran O'Shea Calendar Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Kieran O'Shea Calendar plugin prior to version 1.3.11. The...