Security Advisory

CVE-2018-18872

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-13 13:04:19

Last updated 2024-08-05 11:23:08

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.

← Browse all CVEs View on cve.org ↗