Joedolson My_calendar
3 CVEs affecting Joedolson My_calendar. Latest disclosed: 2024-04-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6360 | High | 8.6 | 2023-11-30 | The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/m… |
CVE-2024-1274 | Medium | 5.4 | 2024-04-02 | The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perfor… |
CVE-2012-6527 | | 2013-01-31 | Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML v… |