joedolson

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

joedolson records in CISA KEV

No joedolson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Calendar 3 records HIGH My Content Management 1 record LOW

Records

3 records in My Calendar · all components

TI-2023-05838 CVE-2023-6360 · GHSA-x23q-f896-mvpf

SQL injection in my-calendar

HIGH 83

The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/my-calendar/v1/events' rest route.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63141 Published 2023-11-30 Fixed in 3.4.22 CWE-89

TI-2024-01186 CVE-2024-1274 · GHSA-9576-cchc-4f79

My Calendar < 3.4.24 - Authenticated Stored XSS

MEDIUM 58

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks (depending on the permissions…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00425 Published 2024-04-02 Fixed in 3.4.24 CWE-79

TI-2012-05245 CVE-2012-6527 · GHSA-jc5h-2p2w-pc95

Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for…

LOW 17

Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02177 Published 2013-01-31 No fix listed CWE-79

Open these records in search →

Critical	2
High	5
Medium	15
Low	1
No CVSS	0