Vulnerabilities (CVE)

Filtered by vendor Google Calendar Events Project Subscribe
Filtered by product Google Calendar Events
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-7138 1 Google Calendar Events Project 1 Google Calendar Events 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gce_feed_ids parameter in a gce_ajax action to wp-admin/admin-ajax.php.