Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: dwbooster Component: Calendar Event Multi View Clear all filters
TI-2022-02639 CVE-2022-2846 · GHSA-cjc3-36xg-wx7g

Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS

Priority MEDIUM 53

The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fiel…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02753 Published 2022-08-16 Fixed in 1.4.07 CWE-79
TI-2021-06785 CVE-2021-24498 · GHSA-556c-5rxg-4747

Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Priority LOW 33

The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php), leading to a reflected Cross-Site Scrip…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03536 Published 2021-08-02 Fixed in 1.4.01 CWE-79