Timely All-in-One Events Calendar, 3658fe123f64cd6ed8675001612f3eb313ef5458

CVE, Research URL: 3658fe123f64cd6ed8675001612f3eb313ef5458
Home page URL: Security reports for Timely All-in-One Events Calendar
Application: Timely All-in-One Events Calendar
Published on: Nov 14, 2013
Research Description: Timely All-in-One Events Calendar [all-in-one-event-calendar] < 1.10 (closed) Timely All-in-One Events Calendar < 1.10 - Cross-Site Scripting The Timely All-in-One Events Calendar plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions before 1.10 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 1.10.
Status: vulnerable