WordPress Plugin Vulnerabilities

Catholic Liturgical Calendar Widget 0.0.1 - Title Field Stored XSS

Description

The Catholic Liturgy Calendar WordPress plugin was affected by a Title Field Stored XSS security vulnerability.

Affects Plugins

Plugin icon
catholic-liturgical-calendar
Fixed in 0.0.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
e393a2b8-2f8a-4992-88e9-8cd47834f637

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2026-01-23
Title
Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes
Published
2024-02-20
Title
Beaver Builder < 2.7.4.3 - Contributor+ Stored XSS via Icon Widget
Published
2023-05-25
Title
WooCommerce Product Categories Selection Widget <= 2.0 - Reflected XSS
Published
2025-03-24
Title
Key4ce osTicket Bridge <= 1.4.0 - Reflected Cross-Site Scripting
Published
2025-01-23
Title
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates < 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting