WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.2.

Üreticinin çözüm notu (İngilizce)

Update the WordPress The Events Calendar plugin to the latest available version (at least 6.18.3).

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…-6-18-2-cross-site-scripting-xss-vulnerability Diğer

Kayıt geçmişi

1. 30 Eki 2026 17:41Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-119367WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
• 6,5 CVE-2026-119369WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
• 5,3 CVE-2026-119368WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
• 6,5 CVE-2026-39739WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
• 6,8 CVE-2026-119764Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview
• 6,1 CVE-2026-119761Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name