CVE-2017-9420 | BDVDB-2026-86087 Detail

Description#

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://spiffycalendar.sunnythemes.com/version-3-3-0/
https://wpvulndb.com/vulnerabilities/8842
http://www.securityfocus.com/bid/98931

Exploit#

No public exploit known

History#

Version 12017-06-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.