CVE-2017-9420

Published: Jun 5, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.

Affected (39)

Products: Sunnythemes: Spiffy Calendar

Sunnythemes

1 product

Spiffy Calendar

Configuration A

39 vulnerable

Vulnerable Software	Affected Versions
Sunnythemes Spiffy Calendar	Version 1.0.0
Sunnythemes Spiffy Calendar	Version 1.0.1
Sunnythemes Spiffy Calendar	Version 1.0.2a
Sunnythemes Spiffy Calendar	Version 1.0.3
Sunnythemes Spiffy Calendar	Version 1.1.0
Sunnythemes Spiffy Calendar	Version 1.1.1
Sunnythemes Spiffy Calendar	Version 1.1.2
Sunnythemes Spiffy Calendar	Version 1.1.3
Sunnythemes Spiffy Calendar	Version 1.1.4
Sunnythemes Spiffy Calendar	Version 1.1.5
Sunnythemes Spiffy Calendar	Version 1.1.6
Sunnythemes Spiffy Calendar	Version 1.1.7
Sunnythemes Spiffy Calendar	Version 1.1.8
Sunnythemes Spiffy Calendar	Version 1.2.0
Sunnythemes Spiffy Calendar	Version 1.2.1
Sunnythemes Spiffy Calendar	Version 1.3.0
Sunnythemes Spiffy Calendar	Version 1.3.1
Sunnythemes Spiffy Calendar	Version 2.0.0
Sunnythemes Spiffy Calendar	Version 2.0.1
Sunnythemes Spiffy Calendar	Version 2.1.0
Sunnythemes Spiffy Calendar	Version 2.1.1
Sunnythemes Spiffy Calendar	Version 2.1.2
Sunnythemes Spiffy Calendar	Version 2.1.3
Sunnythemes Spiffy Calendar	Version 3.0.0
Sunnythemes Spiffy Calendar	Version 3.0.1
Sunnythemes Spiffy Calendar	Version 3.0.2
Sunnythemes Spiffy Calendar	Version 3.0.3
Sunnythemes Spiffy Calendar	Version 3.0.4
Sunnythemes Spiffy Calendar	Version 3.0.5
Sunnythemes Spiffy Calendar	Version 3.0.6
Sunnythemes Spiffy Calendar	Version 3.0.7
Sunnythemes Spiffy Calendar	Version 3.0.8
Sunnythemes Spiffy Calendar	Version 3.1.0
Sunnythemes Spiffy Calendar	Version 3.1.1
Sunnythemes Spiffy Calendar	Version 3.1.2
Sunnythemes Spiffy Calendar	Version 3.1.3
Sunnythemes Spiffy Calendar	Version 3.1.4
Sunnythemes Spiffy Calendar	Version 3.1.5
Sunnythemes Spiffy Calendar	Version 3.2.0