2 matches found
Sql injection
SQL injection in the Spider Event Calendar aka spider-event-calendar plugin before 1.5.52 for WordPress is exploitable with the orderby parameter to calendarfunctions.php or widgetThemefunctions.php, related to frontend/frontendfunctions.php...
7.5CVSS9.7AI score0.02267EPSS
SaveExploits1References2Affected Software1
CVE-2017-7719: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the Spider Event Calendar aka spider-event-calendar plugin before 1.5.52 for WordPress is exploitable with the orderby parameter to calendarfunctions.php or widgetThemefunctions.php, related to frontend/frontendfunctions.php...
9.8CVSS5.9AI score0.02267EPSS
SaveExploits1References2
20