| Package | Affected versions | Patched versions |
|---|---|---|
| holiday calendar | < 1.11.3 | 1.11.3 |
XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free