XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.

Published Oct 1, 2018 · Updated Aug 6, 2024 · Assigned by mitre