WordPress Plugin Vulnerabilities

My Calendar 1.10.2 - XSS in PATH_INFO Parameter

Description

The My Calendar WordPress plugin was affected by a XSS in PATH_INFO Parameter security vulnerability.

Affects Plugins

Plugin icon
my-calendar
Fixed in 1.10.5

References

CVE
CVE-2012-6527

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
c280cc12-42db-405a-a26c-c82af9d9e7da

Timeline

Publicly Published
2014-09-29 (about 11 years ago)
Added
2014-09-29 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-22
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-05-17
Title
WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting
Published
2026-03-31
Title
Kubio AI Page Builder < 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-06-05
Title
Freemind Viewer <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-07-10
Title
Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting