WordPress Plugin Vulnerabilities

Event Calendar WD < 1.1.46 - Cross-Site Scripting (XSS)

Description

The plugin was affected by a Cross-Site Scripting issue

Affects Plugins

Plugin icon
event-calendar-wd
Fixed in 1.1.46

References

URL
https://plugins.trac.wordpress.org/changeset/2553789

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
4.8 (medium)

Miscellaneous

Verified
No
WPVDB ID
1111c640-548e-44ee-9dc4-d360e0b64c37

Timeline

Publicly Published
2021-06-25 (about 4 years ago)
Added
2021-06-28 (about 4 years ago)
Last Updated
2021-06-28 (about 4 years ago)

Other

Published
Title
Published
2024-04-16
Title
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2024-06-03
Title
Brave < 0.7.0 - Admin+ Stored XSS
Published
2024-08-20
Title
Envira Gallery < 1.8.15 - Author+ Stored XSS
Published
2025-01-16
Title
Responsivity <= 0.0.6 - Reflected Cross-Site Scripting
Published
2025-04-04
Title
BWD Elementor Addons <= 4.4.2 - Contributor+ Stored XSS