CVE-2026-14827

The CVE-2026-14827 entry concerns the Calendar WordPress plugin (before 1.3.18). The vulnerability is a stored XSS via the event_link parameter, where a user-supplied event field is not properly escaped before being output inside an HTML attribute on a public page. This allows users with the Cont...