Vulners
Lucene search
2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gcefeedids parameter in a gceajax action to wp-admin/admin-ajax.php...
4.3CVSS6.2AI score0.00586EPSS
Exploits3References7Affected Software1
CVE-2014-7138
Cross-site scripting XSS vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gcefeedids parameter in a gceajax action to wp-admin/admin-ajax.php...
5.7AI score0.00586EPSS
Exploits3References7
20