CVE-2023-32122 Unauth

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
Spiffy Calendar 4.9	earliest → 4.9.3	No fix stated

Other CVEs of Spiffy Calendar

The 11 CVEs of Spiffy Calendar →

CVE-2025-68523 Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly… 4.3 Medium CVE-2024-43969 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins… 7.6 High CVE-2024-45457 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins… 6.5 Medium CVE-2024-45458 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins… 7.1 High