Spidercalendar

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-14	CVE-2022-0212	Cross-site Scripting vulnerability in 10Web Spidercalendar The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting it back in the page via the window AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue. network 10web CWE-79	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.