PatchTheCVEphp event calendar vulnerabilities and fixes
Recent CVEs affecting php event calendar, with upgrade or downgrade steps. 2 tracked.
Also searched as: phpeventcalendar.
php event calendar has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-11-08. Highest priority: CVE-2021-42077 (score 65/100).
- CVE-2021-42078 MEDIUM 6.1 DOWNGRADE PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /se
- CVE-2021-42077 CRITICAL 9.8 UPGRADE PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.ph
FAQ
How do I fix php event calendar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php event calendar being exploited right now?
None of the tracked php event calendar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php event calendar CVE should I patch first?
CVE-2021-42077 currently ranks highest (65/100): PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.ph.