Jeptack “security risk”

Thanks for the heads up @sgallay. Were there any more details, a link to any more information, or some other way to see what the issue was?

Thanks,

Zack

@zgrossbart , here are the details via WPScan.

Any news on this issue?

Wordfence is also listing this: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/editorial-calendar/editorial-calendar-3712-authenticatedcontributor-stored-cross-site-scripting-via-edcal-saveoptions-ajax-action

Any update? Should we find a replacement for this plugin? I am getting concerned that it has been 3 weeks since originally reported, and 2 weeks since anything has been replied to.

Thanks!

Hello ??

We are looking into it. In the latest version we have fixed data validation and security issues.

We are now fixing the Cross Site Scripting security issue.

Thank you,
Mej

Any update? It has been about a week since your last post.

Thanks.

Hello there! We have released v3.8.1.

v3.8.3 should fix the Cross-site Scripting issue.