SalvusAlert : WordPress Plugin My Calendar SQL Injection vulnerability

Summary: Certain versions of WordPress Plugin My Calendar vulnerable to SQL Injections


Information At A Glance
Source	Version/Dependency	Developer	Severity
WordPress.org Plugin site	versions < 1.10.6	joedolson	HIGH
Summary The WordPress plugin – My calendar is vulnerable to cross site scripting attacks.The versions 1.10.1 and possibly others are considered to be vulnerable. Fix Update to v1.10.6. You can find the update here. Source http://wordpress.org/extend/plugins/my-calendar/changelog/

Advertisement: Try Audible Now and Get A Free Audiobook Download with a 14 Day Trial. Choose from over 100,000 Titles.

Disclaimer: Salvus Alerting provides timely industry related information to its subscriber community and visitors for informational purposes only and makes every effort to distribute accurate and reliable information. Any information provided, is considered “as-is” and the subscriber and/or visitor assumes all responsibility for its uses. Salvus Alerting disclaims all warranties with regard to the information being provided, including all implied warranties of merchantability and fitness. In no event shall Salvus Alerting be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other legal action, arising out of or in connection with the use or performance of this information being provided. Salvus Systems and Salvus Alerting is a wholly owned and operated by FactNgN, LLC.