CyberRota
← Ana sayfaya dön

CVE-2026-14827

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-27T07:16:26.180 · Çekilme zamanı: 2026-07-27T12:09:40.651205+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-14827
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress Java

Orijinal NVD Açıklaması

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calendar.