CVE Database /
CVE-2019-15713
CVE · Medium
CVE-2019-15713 — My Calendar – Accessible Event Manager [my-calendar] < 3.1.10
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-15713
|
My Calendar – Accessible Event Manager [my-calendar] < 3.1.10 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 3.1.10
|
3.1.10 |
2019-04-30 |
—
|
CVE-2019-15713
My Calendar versions before 3.1.10 contain a cross-site scripting vulnerability caused by inadequately escaped URL parameters displayed in the public-facing portions of websites. An attacker could exploit this flaw by injecting malicious scripts through URL parameters that are rendered without proper sanitization. This vulnerability affects the plugin's public event display functionality across multiple locations.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings