VULNERABILITY INTELLIGENCE

CVE-2025-68523

CVSS score8.1 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2025-12-24

Last modified2026-10-07

Description

Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through <= 5.0.7.