Vendors / My Calendar Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now My Calendar Project records in CISA KEV No My Calendar Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00264 · Published 2023-05-22 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00269 · Published 2023-03-15 · No fix listed CWE-352
Priority LOW 31
The my-calendar plugin before 3.1.10 for WordPress has XSS.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02182 · Published 2019-08-28 · No fix listed CWE-79
Priority LOW 25
The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in the response, leadin…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0062 · Published 2021-11-29 · Fixed in 3.2.18 CWE-79
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs