7.6
High
CVE-2024-38692 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.11.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spiffy Calendar 4.9 | earliest → 4.9.11 | No fix stated |
Other CVEs of Spiffy Calendar
The 11 CVEs of Spiffy Calendar →
CVE-2025-68523
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly…
4.3
Medium
CVE-2024-43969
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins…
7.6
High
CVE-2024-45457
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins…
6.5
Medium
CVE-2024-45458
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins…
7.1
High