Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in the EventCalendar module for Drupal 7.14 allows remote attackers to inject arbitrary web script or HTML via the year parameter to eventcalander/. NOTE: this issue has been disputed by the Drupal Security Team; it may be site-specific. If so, then this CVE will be REJECTed in the future.
Remediation
References
Related Vulnerabilities
WordPress Plugin Listing, Classified Ads & Business Directory-uListing SQL Injection (2.0.3)
WordPress Plugin Image Slider Cross-Site Scripting (1.1.5)
MySQL CVE-2020-14829 Vulnerability (CVE-2020-14829)
WordPress Plugin Podlove Podcast Publisher SQL Injection (3.5.5)
WordPress Plugin QIWI payment module for Woocommerce Cross-Site Scripting (0.0.9)