CVE-2014-8586 Calendar Event Multi View < 1.0.2 - SQL Injection
HighCVSS 7.5
EPSS 40.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cp multi view event calendar project cp multi view event calendar | = 1.0.1 | No fix listed |
| wordpress cp-multi-view-calendar(WordPress) | < 1.0.2 | 1.0.2 |
References
- 113670 vdb-entry
- packetstormsecurity.com exploit
- 35073 exploit
- 70718 vdb-entry
- cpmultiview-wordpress-calid-sql-injection(97766) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org