WordPress Plugin Vulnerabilities

Events Calendar - wp-admin/admin.php EC_id Parameter XSS

Description

The events-calendar WordPress plugin was affected by a wp-admin/admin.php EC_id Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
events-calendar
Fixed in 6.7.12a

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
da92f270-752f-417f-8dee-8123d43c7d76

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-07-11
Title
Change From Email <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-10-17
Title
DPD Baltic Shipping < 1.2.84 - Reflected Cross-Site Scripting
Published
2024-04-24
Title
Simple Membership < 4.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2014-08-01
Title
podPress 8.8.10.13 - players/1pixelout/1pixelout_player.swf playerID Parameter XSS
Published
2022-12-27
Title
HashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode