Editorial Calendar Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Editorial Calendar Project records in CISA KEV

No Editorial Calendar Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Editorial Calendar 2 records MEDIUM

Records

2 records

TI-2022-03762 CVE-2022-4115 · GHSA-c3jj-9wrg-44g9

Editorial Calendar < 3.8.3 - Contributor+ Stored XSS

MEDIUM 58

The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-06-27 Fixed in 3.8.3

TI-2013-06166 CVE-2013-10023 · GHSA-xr8m-38f7-mvq7

Editorial Calendar Plugin edcal.php edcal_filter_where sql injection

MEDIUM 43

A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00723 Published 2023-04-08 No fix listed CWE-89

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0