Skip to content
OpenAdvisories
High · 7.1 CVE-2025-31462 EUVD-2025-9446GHSA-x9cf-qv7q-gcr9

WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through <= 0.8.5.

Affected products

VendorProductAffectedFixed
rzfarrell CGM Event Calendar ≤ 0.8.5 —

References