WordPress the-holiday-calendar plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. the-holiday-calendar plugin is used in one of the calendar plugin . A cross-site scripting vulnerability exists i...

Cross site scripting

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...

CVE-2015-9270: Improper Neutralization of Input During Web Page Generation

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter...