CVE-2024-45457

Mô tả

Tham khảo

• patchstack.com/database/Wordpress/Plugin/spiffy-calendar/vulnerability/wordpress-spiffy-calendar-plugin-4-9-13-cross-site-scripting-xss-vulnerability

Lỗ hổng khác của spiffy calendar

• CVE-2024-45458TRUNG BÌNH 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-…
• CVE-2024-38692CAO 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows …
• CVE-2024-30528TRUNG BÌNH 6.3Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10.
• CVE-2024-30427TRUNG BÌNH 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows …
• CVE-2024-0855TRUNG BÌNH 5.3The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter it when creating an…