CVE-2023-32122 Unauth

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Spiffy Calendar 4.9	premières → 4.9.3	Pas de correctif indiqué

Autres CVE de Spiffy Calendar

Les 11 CVE de Spiffy Calendar →

CVE-2025-68523 Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly… 4.3 Moyenne CVE-2024-43969 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins… 7.6 Élevée CVE-2024-45457 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins… 6.5 Moyenne CVE-2024-45458 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins… 7.1 Élevée