Malicious code in react-google-calendar-events (npm)

The package react-google-calendar-events was found to contain malicious code...

Malicious code in calendar-widget (npm)

The package calendar-widget was found to contain malicious code...

Malicious code in epoch-calendar (npm)

The package epoch-calendar was found to contain malicious code...

MAL-2025-31791 Malicious code in react-google-calendar-events (npm)

The package react-google-calendar-events was found to contain malicious code...

Malicious code in msg-calendar (npm)

The package msg-calendar was found to contain malicious code...

Malicious code in assignment-2-calendar (npm)

The package assignment-2-calendar was found to contain malicious code...

MAL-2025-26839 Malicious code in msg-calendar (npm)

The package msg-calendar was found to contain malicious code...

MAL-2025-14948 Malicious code in assignment-2-calendar (npm)

The package assignment-2-calendar was found to contain malicious code...

Malicious code in acerta-calendar-gui (npm)

The package acerta-calendar-gui was found to contain malicious code...

Malicious code in react-pdd-calendar (npm)

The package react-pdd-calendar was found to contain malicious code...

MAL-2025-31837 Malicious code in react-pdd-calendar (npm)

The package react-pdd-calendar was found to contain malicious code...

MAL-2025-31838 Malicious code in react-pdd-calendar-expand (npm)

The package react-pdd-calendar-expand was found to contain malicious code...

MAL-2025-33275 Malicious code in simple-month-calendar (npm)

The package simple-month-calendar was found to contain malicious code...

CVE-2025-54676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS. This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5.3...

CVE-2025-54676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...

CVE-2025-52730

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Stored XSS.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a throug...

CVE-2025-52731

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through =...

CVE-2025-54676 WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...

CVE-2025-54676

CVE-2025-54676 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Online Booking & Scheduling Calendar for WordPress by vcita” (versions up to and including 4.5.3). The issue arises from improper input neutralization during web page generation, enabling stored XSS. Publ...

CVE-2025-54676 WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...