WordPress Plugin Vulnerabilities

CP Multi View Event Calendar <= 1.1.4 - SQL Injection & XSS

Description

The Calendar Event Multi View WordPress plugin was affected by a SQL Injection & XSS security vulnerability.

Affects Plugins

Plugin icon
cp-multi-view-calendar
Fixed in 1.1.5

References

Exploitdb
36243
URL
auxiliary/scanner/http/wordpress_cp_calendar_sqli

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
Yes
WPVDB ID
50db43be-9fdb-4b5f-bba5-4c0d62689dbf

Timeline

Publicly Published
2015-02-28 (about 11 years ago)
Added
2015-04-19 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2019-06-26
Title
LiveChat < 3.7.6 - Unauthenticated Option Update/Reset and Stored XSS
Published
2014-08-01
Title
RokBox - Multiple Vulnerabilities
Published
2015-07-01
Title
Powerplay Gallery - Arbitrary File Upload & SQL Injection
Published
2014-08-01
Title
Spider Catalog - Cross-Site Scripting & SQL Injection Vulnerabilities
Published
2019-06-15
Title
Dropshix < 4.0.14 - Arbitrary Product Import