CVE-2026-2355 | My Calendar Plugin up to 3.7.3 on WordPress Shortcode template cross site scripting

A vulnerability classified as problematic was found in My Calendar Plugin up to 3.7.3 on WordPress. The affected element is an unknown function of the component Shortcode Handler. The manipulation of the argument template results in cross site scripting.

This vulnerability is cataloged as CVE-2026-2355. The attack may be launched remotely. There is no exploit available.