NuytsTech Security

CVE-2025-53350

by ·

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in webjunk Calendar Plus calendar-plus allows Reflected XSS.This issue affects Calendar Plus: from n/a through <= 1.2.4. More information : https://vdp.patchstack.com/database/Wordpress/Plugin/calendar-plus/vulnerability/wordpress-calendar-plus-plugin-1-2-4-cross-site-scripting-xss-vulnerability

Tags: