Vendor/product archive

joedolson / my_calendar CVEs

Beta · best-effort

3 CVEs tagged to joedolson / my_calendar — 0 Critical, 1 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to joedolson vendor archive

CVE-2024-1274

Published Apr 2, 2024

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripti…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-6360

Published Nov 30, 2023

The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/my-calendar/v1/events…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2012-6527

Published Jan 31, 2013

Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.6 · Low

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1