CVE-2023-23813

概要

参考情報

• patchstack.com/database/vulnerability/my-calendar/wordpress-my-calendar-plugin-3-4-3-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

my calendar のその他の脆弱性

• CVE-2022-47427高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.
• CVE-2021-24927中 5.4The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (availa…
• CVE-2019-15713中 6.1The my-calendar plugin before 3.1.10 for WordPress has XSS.