cleantalk
Vulnerabilities and Security Researches

XO Event Calendar, 92562c6c-94a4-427d-97dc-7f5ffddcb6d8

Application

XO Event Calendar

Published on
-
Research Description
XO Event Calendar [xo-event-calendar] < 2.3.7 (closed) XO Event Calendar &lt; 2.3.7 - Reflected Cross-Site Scripting The plugin does not escape the selected-name parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
Affected versions
max 2.3.7.
Status
vulnerable