WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting
WordPress Calendar Event Multi View plugin before 1.4.01 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php).
calendar_event_multi_viewPoC 已收录
CVSS6.1EPSS 30.6%