TI-2014-05958 CVE-2014-7138 · GHSA-q4f5-ggvq-wc6pCross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before…Priority LOW 25Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gce_feed_ids parameter in a gce_ajax action…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02388 · Published 2014-10-16 · No fix listed CWE-79