Security Fix in My Calendar

July 14, 2014

Topics: WordPress.

I released version 2.3.10 of My Calendar today, which fixes a major XSS security issue. Please upgrade – regardless of your current version – as soon as possible! This issue goes back quite a long ways and applies to many versions of My Calendar.

And if you’re on a version of My Calendar that it doesn’t impact, you should update anyway. Seriously.

Thanks to Tim Hurley for responsibly reporting this issue!

Have something to contribute?




« Read my Comment Policy

2 Comments to “Security Fix in My Calendar”

  1. I just added My Calendar (2.3.20) and when I try to save the Output Settings (even without changing anything) the format of the calendar changes to move the views options, etc BELOW the calendar.

    I can’t find where to undo these changes.

    Thanks,

    peter

  2. Easyfix Property Services is a fully insured team of professional building and property maintenance experts.

    We are based in the Sutherland Shire and service the Sydney Metro area. We run a mobile computerised booking system.

    Our portfolio of clients include strata management companies, real estates, corporate businesses, trade customers and private residential households.