8625 matches found
XWiki Contrib Mocca Calendar Application 跨站脚本漏洞
XWiki Contrib Mocca Calendar Application is an open source XWiki plugin for XWiki Contrib. A cross-site scripting vulnerability exists in XWiki Contrib Mocca Calendar Application versions prior to 2.15, which stems from cross-site scripting in the calendar import header...
PT-2025-31765 · Unknown · Mocca Calendar
Name of the Vulnerable Software and Affected Versions: Mocca Calendar versions prior to 2.15 Description: The Mocca Calendar application is susceptible to a cross-site scripting XSS issue. This issue occurs through manipulation of the title field when viewing an event page. Recommendations: Updat...
CVE-2025-52131
The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field...
CVE-2025-52131
The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field...
CVE-2025-52132
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page...
CVE-2025-52133
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import...
Nextcloud: Calendar app allowed booking appointments without the generated token
The calendar app was found to allow booking appointments without the necessary generated token, which could have led to unauthorized access...
PT-2025-30554
Name of the Vulnerable Software and Affected Versions Invision Community versions prior to 4.7.20 Description The Invision Community software contains a SQL injection issue in the calendar/view.php file. The vulnerability resides in the IPScalendarmodulesfrontcalendarview::search method, where us...
📄 Invision Community 4.7.20 SQL Injection
Invision Community versions 4.7.20 and below have a vulnerability located within the /applications/calendar/modules/front/calendar/view.php script. Specifically, in the IPS\calendar\modules\front\calendar\view::search method: user input passed through the location request parameter is not properl...
CVE-2025-7868
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...
Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6042 Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-26855
A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...
CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...
CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...
CVE-2025-7868
Portabilis i-Educar Calendar module vulnerability (CVE-2025-7868) allows remote cross-site scripting via the Motivo/descricao argument in /intranet/educar_calendario_dia_motivo_cad.php. Affected versions range up to 2.10; one source specifies version 2.9.0. The exploit is publicly disclosed. Root...
CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...
VulnCheck KEV: CVE-2022-1006
The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...
PT-2025-30170 · Portabilis · I-Educar
Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A cross-site scripting issue exists due to the manipulation of the Motivo argument within the Calendar Module. The vulnerability is located in the /intranet/educar calendario dia motivo cad.php...
