WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.2.

Üreticinin çözüm notu (İngilizce)

Update the WordPress The Events Calendar plugin to the latest available version (at least 6.18.3).

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…-18-2-cross-site-scripting-xss-vulnerability-2 Diğer

Kayıt geçmişi

1. 30 Eki 2026 18:10Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-119367WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
• 5,3 CVE-2026-119368WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
• 6,5 CVE-2026-119370WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
• 5,1 CVE-2026-39375Frappe LMS has Stored XSS in Course Meta
• 6,5 CVE-2026-119365WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
• 5,3 CVE-2026-105454Stored XSS via crafted URLs in HTML ticket content in Request Tracker