Vulnerabilities > CVE-2021-24552 - Unspecified vulnerability in Simple Events Calendar Project Simple Events Calendar

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

simple-events-calendar-project

NVD

Published: 2021-08-23

Updated: 2024-11-21

Summary

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injection issue

Vulnerable Configurations

Part	Description	Count
Application	Simple_Events_Calendar_Project Simple Events Calendar Project Simple Events Calendar - Simple Events Calendar Project Simple Events Calendar 0.1 Simple Events Calendar Project Simple Events Calendar 0.1.1 Simple Events Calendar Project Simple Events Calendar 0.1.2 Simple Events Calendar Project Simple Events Calendar 0.1.3 Simple Events Calendar Project Simple Events Calendar 0.1.4 Simple Events Calendar Project Simple Events Calendar 0.1.5 Simple Events Calendar Project Simple Events Calendar 1.0 Simple Events Calendar Project Simple Events Calendar 1.2 Simple Events Calendar Project Simple Events Calendar 1.2.1 Simple Events Calendar Project Simple Events Calendar 1.2.2 Simple Events Calendar Project Simple Events Calendar 1.2.3 Simple Events Calendar Project Simple Events Calendar 1.2.4 Simple Events Calendar Project Simple Events Calendar 1.3.0 Simple Events Calendar Project Simple Events Calendar 1.3.1 Simple Events Calendar Project Simple Events Calendar 1.3.3 Simple Events Calendar Project Simple Events Calendar 1.3.4 Simple Events Calendar Project Simple Events Calendar 1.3.5 Simple Events Calendar Project Simple Events Calendar 1.4.0	19

Summary

Vulnerable Configurations

References