Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)
40Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 3.5%
da publicação à arma
Publicada no NVD2 de ago.
VulnCheck+1406d
probabilidade de exploração
3.5%top 12% das CVEs
exploração observada
simVulnCheck
The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php), leading to a reflected Cross-Site Scripting issue.
Produtos afetados
Unknown · Calendar Event Multi View