← Database

CVE-2024-45458

HIGH CVSS: 7.1 Published: 2024-09-15 Modified: 2026-06-17

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through <= 4.9.13.

Affected Platforms

Spiffyplugins Spiffy Calendar

Weakness Type

CWE-79

References