agentprime: joedolson-my-calendar-accessible-event-managerEvery new CVE for joedolson-my-calendar-accessible-event-manager.https://agentprime.io/CVE-2026-119714: My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameterhttps://agentprime.io/advisories/CVE-2026-119714/https://agentprime.io/advisories/CVE-2026-119714/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 15:16:12 GMTCVECVE-2026-104798: My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attributehttps://agentprime.io/advisories/CVE-2026-104798/https://agentprime.io/advisories/CVE-2026-104798/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 04:27:04 GMTCVEcriticalCVE-2026-77187: My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-77187/https://agentprime.io/advisories/CVE-2026-77187/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 03:28:47 GMTCVECVE-2026-77186: My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fallback' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-77186/https://agentprime.io/advisories/CVE-2026-77186/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 03:28:47 GMTCVECVE-2026-6854: My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parametershttps://agentprime.io/advisories/CVE-2026-6854/https://agentprime.io/advisories/CVE-2026-6854/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 11:30:33 GMTCVECVE-2026-11896: My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameterhttps://agentprime.io/advisories/CVE-2026-11896/https://agentprime.io/advisories/CVE-2026-11896/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 08:33:06 GMTCVECVE-2026-7525: My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameterhttps://agentprime.io/advisories/CVE-2026-7525/https://agentprime.io/advisories/CVE-2026-7525/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 03:27:14 GMTCVECVE-2026-2355: My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-2355/https://agentprime.io/advisories/CVE-2026-2355/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 11:22:29 GMTCVE