5.4
Moyenne
CVE-2024-1274 The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users…
Description
The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks (depending on the permissions set by the admin)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| My Calendar 3.4 | premières → < 3.4.24 | 3.4.24 |
| my_calendar 3.4 | premières → < 3.4.24 | 3.4.24 |