CVE-2026-77187 | joedolson My Calendar Plugin up to 3.8.3 on WordPress Shortcode before/after cross site scripting

September 9, 2026 Yanac

A vulnerability was found in joedolson My Calendar Plugin up to 3.8.3 on WordPress. It has been declared as problematic. Impacted is an unknown function of the component Shortcode Handler. Executing a manipulation of the argument before/after can lead to cross site scripting.

This vulnerability appears as CVE-2026-77187. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More