WordPress the-holiday-calendar plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. the-holiday-calendar plugin is used in one of the calendar plugin . A cross-site scripting vulnerability exists i...

Cross site scripting

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

CVE-2015-9270

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

PT-2018-4579

Name of the Vulnerable Software and Affected Versions The Holiday Calendar plugin versions prior to 1.11.3 Description A security issue exists due to the presence of XSS in the plugin, which can be exploited via the thc-month parameter. Recommendations For versions prior to 1.11.3, update to...

CVE-2015-9270: Improper Neutralization of Input During Web Page Generation

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...