Vulnerabilities (CVE)

Filtered by vendor Vn-calendar Project Subscribe
Filtered by product Vn-calendar
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-4571 1 Vn-calendar Project 1 Vn-calendar 2024-02-04 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fs or (2) w parameter.