My Calendar, 2b9cc8a42a7d5bd8c6ab38da456950585d352eb5
- CVE, Research URL
- Home page URL
- Application
- Published on
- Apr 20, 2015
- Research Description
- My Calendar – Accessible Event Manager [my-calendar] < 2.3.10 My Calendar < 2.3.10 - Reflected Cross-Site Scripting The My Calendar plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 2.3.10 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
- Affected versions
-
max 2.3.10.
- Status
-
vulnerable