Private Google Calendars < 20240106 - Contributor+ Stored XSS

2024-01-1200:00:00

wpscan.com

google calendars

private

stored xss

contributor role

security vulnerability

AI Score

5.8

Confidence

High

EPSS

Percentile

14.0%

JSON

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

patchstack.com/database/vulnerability/private-google-calendars/wordpress-private-google-calendars-plugin-20231125-contributor-cross-site-scripting-xss-vulnerability