Availability Calendar

Availability Calendar has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

2 independent researchers contributed these findings, most of them (2) reported by xiahao.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Availability Calendar vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2023-48744

Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page()

Read the full analysis

Vulnerability Records

3 records


2023-11-24 00:00	Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page() Availability Calendar <= 1.2.6	`CVE-2023-48744`	4.3 Medium	Nguyen Xuan Chien	No
2021-08-04 00:00	Availability Calendar < 1.2.1 - SQL Injection Availability Calendar < 1.2.1	`CVE-2021-24606`	8.8 High	xiahao	Yes
2021-08-03 00:00	Availability Calendar <= 1.2.1 - Stored Cross-Site Scripting Availability Calendar <= 1.2.1	`CVE-2021-24604`	5.5 Medium	xiahao	Yes

Showing 1–3 of 3 reports