CVE-2022-36390

概要

参考情報

• patchstack.com/database/vulnerability/calendar-event/wordpress-event-calendar-calendar-plugin-1-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/calendar-event · Product

event calendar のその他の脆弱性

• CVE-2024-8700高 7.5The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to dele…
• CVE-2022-38067中 5.3Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.