Veille CVE

Octobre 2026

2 CVE

  1. CVE-2026-110903 6.5 Moyenne

    Liquid Web / StellarWP The Events Calendar

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.

  2. CVE-2026-95606 9.8 Critique

    Liquid Web / StellarWP The Events Calendar

    Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.