Vulnerabilities > Calendar Plugin Project

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-16	CVE-2021-34667	Cross-site Scripting vulnerability in Calendar Plugin Project Calendar Plugin 1.0 The Calendar_plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of `$_SERVER['PHP_SELF']` in the ~/calendar.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0. network low complexity calendar-plugin-project CWE-79	6.1

Vulnerabilities > Calendar Plugin Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Calendar Plugin Project"}]}