8704 matches found
CVE-2023-27918
Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...
CVE-2023-27918
Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...
CVE-2023-27961
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...
Input validation
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...
CVE-2023-28169
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in CoreFortress Easy Event calendar plugin = 1.0 versions...
CVE-2023-28169
CVE-2023-28169 affects the WordPress plugin CoreFortress Easy Event calendar (versions
CVE-2023-28169 WordPress Easy Event calendar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in CoreFortress Easy Event calendar plugin = 1.0 versions...
CVE-2023-27961
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...
PT-2023-21604 · Corefortress · Corefortress Easy Event Calendar Plugin
Name of the Vulnerable Software and Affected Versions: CoreFortress Easy Event calendar plugin versions prior to 1.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 1.0...
Wordpress plugin Easy Event calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
Software Spiffy Calendar Type Plugin Vulnerable versions = 4.9.3 Fixed in 4.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32122 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 27fe48000742 Credits LEE SE HYOUNG...
WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Chronosly Events Calendar Type Plugin Vulnerable versions = 2.6.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-31093 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID de80c38a0ada Credits Mika Requir...
WordPress plugin Appointment and Event Booking Calendar for WordPress 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Appointment and Event...
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
Software Booking calendar, Appointment Booking System Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47428 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID be3286ef939c Credits thiennv Required...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
Design/Logic Flaw
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
PT-2023-14539 · Unknown · Touchdown Timesheet Tracking Component For Jira
Name of the Vulnerable Software and Affected Versions: TouchDown Timesheet tracking component for Jira version 4.1.4 Description: The issue allows for XSS in the calendar view. Recommendations: For version 4.1.4, update to a version that fixes the XSS issue in the calendar view, as the current...