Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjunk Calendar Plus calendar-plus allows Reflected XSS.This issue affects Calendar Plus: from n/a through <= 1.2.4.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 22 Oct 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjunk Calendar Plus calendar-plus allows Reflected XSS.This issue affects Calendar Plus: from n/a through <= 1.2.4. | |
| Title | WordPress Calendar Plus plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability | |
| Weaknesses | CWE-79 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2025-10-22T14:32:31.360Z
Reserved: 2025-06-27T11:59:38.159Z
Link: CVE-2025-53350
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-10-22T15:15:48.927
Modified: 2025-10-22T21:12:32.330
Link: CVE-2025-53350
Redhat
No data.
OpenCVE Enrichment
No data.