Spiffy Calendar

47 known CVEs 2K+ active installs

Scan My Site Free
UNKNOWN: 47
Known Vulnerabilities 47
CVE-2024-45458 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Reflected XSS.This issue affects Spiffy Cale
CVE-2024-45458 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Reflected XSS.This issue affects Spiffy Cale
CVE-2024-45458 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Reflected XSS.This issue affects Spiffy Cale
CVE-2024-45458 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Reflected XSS.This issue affects Spiffy Cale
CVE-2024-45457 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Stored XSS.This issue affects Spiffy Calenda
CVE-2024-45457 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Stored XSS.This issue affects Spiffy Calenda
CVE-2024-45457 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Stored XSS.This issue affects Spiffy Calenda
CVE-2024-45457 UNKNOWN EPSS 0.2%
Published 2024-09-15 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Stored XSS.This issue affects Spiffy Calenda
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.3
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.4
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.5
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.6
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.7
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.8
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.2.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.2.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.3.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.3.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.0.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.0.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.1.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.1.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.1.2
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <2.1.3
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.2
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.3
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.4
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.5
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.6
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.7
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.0.8
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.2
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.3
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.4
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.1.5
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <3.2.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.0.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.0.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.0.2a
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.0.3
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.0
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.1
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.
CVE-2017-9420 UNKNOWN EPSS 0.7%
Published 2017-06-05 · Affected: <1.1.2
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.

Is Spiffy Calendar running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free