6.5
Medium
CVE-2026-25465 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.36.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CP Multi View Event Calendar 1.4 | earliest → 1.4.36 | No fix stated |
Other CVEs of CP Multi View Event Calendar
The 5 CVEs of CP Multi View Event Calendar →
CVE-2026-109901
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP…
8.5
High
CVE-2025-58009
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting…
3.8
Low
CVE-2023-23814
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured…
3.8
Low
CVE-2023-28492
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue…
4.3
Medium