Approved changes feed: RSS · Atom

cpe:2.3:a:pixelite:wp_fullcalendar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPixelite (ca9294d8-0951-5843-924d-fbe8ce37e2a4)
ProductWp Fullcalendar (1a0c9fcf-b526-5eb4-9f24-76074e2dcbf0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/wp-fullcalendar purl2cpe 2026-06-01 10:11:58.285386

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22261 vulnerable 2026-06-08 07:10:52.728202 WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a through <= 1.5.
Published: 2025-01-07T10:49:06.496Z
Updated: 2026-04-28T16:10:57.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.