Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-22497 EUVD-2025-14967GHSA-v9wm-8h4w-7wmw

WordPress Simple Google Calendar Outlook Events Block Widget plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through <= 2.5.0.

Affected products

VendorProductAffectedFixed
bramwaas Simple Google Calendar Outlook Events Block Widget ≤ 2.5.0 —

References