WordPress Plugin Vulnerabilities

Spider Calendar 1.1.0 - "many_sp_calendar" Cross-Site Scripting

Description

The spider-calendar WordPress plugin was affected by a "many_sp_calendar" Cross-Site Scripting security vulnerability.

Affects Plugins

Plugin icon
spider-calendar
Fixed in 1.1.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
cb7504cb-4540-4f11-aa29-b98664c94ec9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2023-04-19
Title
Yatra < 2.1.15 - Admin+ Stored XSS
Published
2024-12-11
Title
WP Service Payment Form With Authorize.net <= 2.6.3 - Reflected Cross-Site Scripting
Published
2017-08-23
Title
Share On Diaspora < 0.7.2 - XSS
Published
2025-01-16
Title
Gateway for Pasargad Bank <= 2.5.2 - Reflected Cross-Site Scripting
Published
2014-08-01
Title
SimpleMail 1.0.6 - Stored XSS