← CVE Intelligence

CVE-2023-6360

No title supplied PUBLISHED

Description (CNA)

The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/my-calendar/v1/events' rest route.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 3.4.22

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.