Read the docs

Simple Events Calendar Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Simple Events Calendar Project records in CISA KEV

No Simple Events Calendar Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Events Calendar 1 record LOW

Records

1 record

TI-2021-06837 CVE-2021-24552 · GHSA-9cm5-927x-hwm7

Simple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection

Priority LOW 35

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injecti…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01578 Published 2021-08-23 No fix listed CWE-89
Open these records in search →