ByteOS Network

NVD Vulnerability Details :

CVE-2013-10023

Modified

Source-cna@vuldb.com

Published At-08 Apr, 2023 | 09:15

Updated At-17 May, 2024 | 00:54

A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcal_filter_where of the file edcal.php. The manipulation of the argument edcal_startDate/edcal_endDate leads to sql injection. The attack can be launched remotely. Upgrading to version 2.7 is able to address this issue. The patch is named a9277f13781187daee760b4dfd052b1b68e101cc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-225151.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

editorial_calendar_project>>editorial_calendar>>Versions before 2.7(exclusive)

cpe:2.3:a:editorial_calendar_project:editorial_calendar:*:*:*:*:*:wordpress:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/wp-plugins/editorial-calendar/commit/a9277f13781187daee760b4dfd052b1b68e101cc	cna@vuldb.com	Patch
https://github.com/wp-plugins/editorial-calendar/releases/tag/2.7	cna@vuldb.com	Release Notes
https://vuldb.com/?ctiid.225151	cna@vuldb.com	Third Party Advisory
https://vuldb.com/?id.225151	cna@vuldb.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History