medium6.1
CVE-2015-9270
XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.
Impact
XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theholidaycalendar | Holiday Calendar | before 1.11.3 |