CVE-2026-77186 | joedolson My Calendar Plugin up to 3.8.3 on WordPress Shortcode shortcode_parse_atts fallback cross site scripting

September 9, 2026 Yanac

A vulnerability was found in joedolson My Calendar Plugin up to 3.8.3 on WordPress. It has been classified as problematic. This issue affects the function shortcode_parse_atts of the component Shortcode Handler. Performing a manipulation of the argument fallback results in cross site scripting.

This vulnerability is reported as CVE-2026-77186. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More