Lucene search
K

CVE-2025-9851 Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

πŸ—“οΈΒ 17 Sep 2025Β 01:49:15Reported byΒ WordfenceTypeΒ 
cvelist
Β cvelist
πŸ”—Β www.cve.orgπŸ‘Β 7Β Views

Authenticated contributors can exploit Appointmind <=4.1.0 via appointmind_calendar to trigger XSS.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-9851
17 Sep 202503:22
–circl
CNNVD
WordPress plugin Appointmind θ·¨η«™θ„šζœ¬ζΌζ΄ž
17 Sep 202500:00
–cnnvd
CNVD
WordPress Appointmind plugin cross-site scripting vulnerability
19 Sep 202500:00
–cnvd
CVE
CVE-2025-9851
17 Sep 202501:49
–cve
EUVD
EUVD-2025-29675
3 Oct 202520:07
–euvd
NVD
CVE-2025-9851
17 Sep 202502:15
–nvd
Patchstack
WordPress Appointmind plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
16 Sep 202522:28
–patchstack
Positive Technologies
PT-2025-38103
17 Sep 202500:00
–ptsecurity
RedhatCVE
CVE-2025-9851
19 Sep 202502:22
–redhatcve
Vulnrichment
CVE-2025-9851 Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
17 Sep 202501:49
–vulnrichment
Rows per page
[
  {
    "vendor": "gentlesource",
    "product": "Appointmind",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation