Security Advisory

CVE-2018-18872

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-13 13:04:19

Last updated 2024-08-05 11:23:08

Assigner mitre

State PUBLISHED

Description

The Kieran OShea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.

← Browse all CVEs View on cve.org ↗