Theholidaycalendar

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Theholidaycalendar records in CISA KEV

No Theholidaycalendar vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2015-07648 CVE-2015-9270 · GHSA-9232-r92f-5jhw

LOW 29

XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00986 Published 2018-10-01 No fix listed CWE-79