Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-53914

Malicious code in bioql PyPI...

6.1CVSS9.2AI score0.00375EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/28 6:25 a.m.•18 views

CVE-2024-13669

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00375EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/26 1:15 p.m.•18 views

CVE-2024-13669

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00375EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/26 1:15 p.m.•16 views

CVE-2024-13669

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00375EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/26 6:00 a.m.•9 views

CVE-2024-13669 CalendApp <= 1.1 - Reflected XSS

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00375EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/26 6:00 a.m.•35 views

CVE-2024-13669 CalendApp <= 1.1 - Reflected XSS

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00375EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/26 6:00 a.m.•83 views

CVE-2024-13669

The CalendApp WordPress plugin, affecting versions 1.1 and earlier , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and escape a parameter before it is output back to the page. This vulnerability could be exploited to target high-p...

6.4AI score0.00375EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•13 views

WordPress plugin CalendApp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS8.9AI score0.00375EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•1 views

CVE-2024-13669: Improper Neutralization of Input During Web Page Generation

The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.9AI score0.00375EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/02/12 9:49 p.m.•10 views

WordPress CalendApp plugin <= 1.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin CalendApp versions = 1.1...

6.1CVSS6.4AI score0.00375EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder