TI-2014-03757 CVE-2014-4571 · GHSA-8xf9-j29q-cj5fMultiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fs or (2) w parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2014-07-02 · No fix listed CWE-79