Skip to content
OpenAdvisories
High · 7.1 CVE-2025-26536 EUVD-2025-8178GHSA-4f8w-7rrv-r75q

WordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 26, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Yendif Player Product: Another Events Calendar

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yendif Player Another Events Calendar another-events-calendar allows Reflected XSS.This issue affects Another Events Calendar: from n/a through <= 1.7.0.

Affected products

VendorProductAffectedFixed
Yendif Player Another Events Calendar ≤ 1.7.0 —

References