Beveiligingsadvies

CVE-2026-14827

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-27 06:00:06

Laatst bijgewerkt 2026-07-27 17:39:03

Toegewezen door WPScan

CVSS-score 6.8

Status PUBLISHED

Beschrijving

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calendar.

← Alle CVE's bekijken Bekijk op cve.org ↗