WordPress Plugin Vulnerabilities

Spider Calendar 1.0.1 - front_end/spidercalendarbig.php date Parameter XSS

Description

The spider-calendar WordPress plugin was affected by a front_end/spidercalendarbig.php date Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
spider-calendar
Fixed in 1.1.3

References

Exploitdb
21715
URL
https://packetstormsecurity.com/files/#117078/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
7cbfbb6b-6896-4dbd-84d1-c847eaeb1a3f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-03-04
Title
Razorpay Subscription Button Elementor Plugin < 1.0.4 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions
Published
2024-11-01
Title
WP Pocket URLs < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-02
Title
Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS
Published
2024-12-06
Title
Easy Replace <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2025-03-19
Title
Your Lightbox <= 1.0 - Reflected Cross-Site Scripting