The My Calendar WordPress plugin... CVE-2024-1274

- AV AC AU C I A
发布: 2024-04-02
修订: 2024-08-27

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks (depending on the permissions set by the admin)

0%
暂无可用Exp或PoC
当前有0条受影响产品信息