CVE-2017-9420

Published: 2017-06-05T19:29Z

Last Modified: 2024-11-21T03:36Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt