From a242ca094efed5b52ac52f70e1d4f0dbc962f14c Mon Sep 17 00:00:00 2001
From: erwanlr <erwan.lr@gmail.com>
Date: Fri, 2 Aug 2013 15:27:57 +0200
Subject: [PATCH] Fix #252 Events Calendar references (& XSS Added)

---
 data/plugin_vulns.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index debc8a96..5a4c75c6 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -2296,9 +2296,16 @@
     <vulnerability>
       <title>Events SQL Injection Vulnerability</title>
       <reference>http://www.exploit-db.com/exploits/10929/</reference>
+      <reference>http://osvdb.org/95677</reference>
       <type>SQLI</type>
       <fixed_in>6.7.10</fixed_in>
     </vulnerability>
+    <vulnerability>
+      <title>WP Events Calendar wp-admin/admin.php EC_id Parameter XSS</title>
+      <reference>http://osvdb.org/74705</reference>
+      <type>XSS</type>
+      <fixed_in>6.7.12a</fixed_in>
+    </vulnerability>
   </plugin>
 
   <plugin name="ImageManager">