low2.6
CVE-2012-6527
Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML v…
Impact
Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joedolson | My Calendar | through 1.10.1 Versions 1.1.0, 1.2.0, 1.2.1, 1.4.0, 1.4.1 |
| Wordpress | Wordpress | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://plugins.trac.wordpress.org/changeset/490070/my-calendar
- http://secunia.com/advisories/47579
- http://wordpress.org/extend/plugins/my-calendar/changelog/
- http://www.securityfocus.com/bid/51539
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72454
- http://plugins.trac.wordpress.org/changeset/490070/my-calendar
- http://secunia.com/advisories/47579
- http://wordpress.org/extend/plugins/my-calendar/changelog/
- http://www.securityfocus.com/bid/51539
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72454