Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

My Calendar – Accessible Event Manager — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in My Calendar – Accessible Event Manager, with AI-generated Chinese analysis, references, and POCs.

Vendor: joedolson

CVE ID Title CVSS Severity Published
CVE-2026-6854 My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters CWE-89 7.5 High 2026-07-08
CVE-2026-11896 My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter CWE-639 5.3 Medium 2026-07-02
CVE-2026-7525 My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter CWE-862 4.3 Medium 2026-05-14
CVE-2026-2355 My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CWE-79 6.4 Medium 2026-03-04

All 4 known CVE vulnerabilities affecting My Calendar – Accessible Event Manager with full Chinese analysis, references, and POCs where available.