My Calendar Security Vulnerabilities and Issues — My Calendar CVE List

Lucene search

JoedolsonMy Calendar

3 matches found

CVE•added 2024/04/02 6:15 a.m.•85 views

CVE-2024-1274

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks (depending on the permissions set by the admin)

5.4CVSS5.2AI score0.00113EPSS

CVE•added 2023/11/30 4:15 p.m.•65 views

CVE-2023-6360

The 'My Calendar' WordPress Plugin, version

9.8CVSS9.8AI score0.84645EPSS

CVE•added 2013/01/31 5:44 a.m.•48 views

CVE-2012-6527

Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

2.6CVSS6AI score0.00355EPSS