7.6
Élevée
CVE-2024-38692 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.11.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spiffy Calendar 4.9 | premières → 4.9.11 | Pas de correctif indiqué |
Autres CVE de Spiffy Calendar
Les 11 CVE de Spiffy Calendar →
CVE-2025-68523
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly…
4.3
Moyenne
CVE-2024-43969
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins…
7.6
Élevée
CVE-2024-45457
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins…
6.5
Moyenne
CVE-2024-45458
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins…
7.1
Élevée