CVE-2024-33950: Aleksei Polechin Alek´ Archives Calendar Widget

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15 versions.

Affected products

• Aleksei Polechin Alek´ Archives Calendar Widget: up to and including 1.0.15

Published 2024-05-14. Last modified 2026-06-17.