Description
Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fs or (2) w parameter.
Unscored
CVE-2014-4571
EUVD-2014-4498GHSA-8xf9-j29q-cj5f
Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote at…
Published Jul 2, 2014 · Updated Aug 6, 2024 · Assigned by mitre