Unscored CVE-2018-16164 EUVD-2018-8018GHSA-4429-pqf2-hv4m

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrar…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: WebDorado Product: Event Calendar WD version

Description

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Web-Dorado	Event Calendar WD version	1.1.21 and earlier	—

References

JVN#75738023 third-party-advisory
https://wpvulndb.com/vulnerabilities/9199
https://plugins.trac.wordpress.org/changeset/1961423/
https://wordpress.org/plugins/event-calendar-wd/#developers