Discourse Security Breach

Discourse is an open source community discussion platform. The platform includes features such as community, email, and chat rooms. A security vulnerability exists in Discourse Calendar version 2201b254 and later versions. An attacker exploiting the vulnerability could access private events...

Liferay Portal and Liferay DXP Security Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

PT-2024-21299 · Discourse · Discourse Calendar

Name of the Vulnerable Software and Affected Versions: Discourse Calendar affected versions not specified Description: The issue allows uninvited users to gain access to private events by crafting a request to update their attendance. This is related to the dynamic calendar feature in the first...

CVE-2024-1425 EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Calendar Widget Link in all versions up to, and including, 3.9.8 due to insufficient input...

CVE-2024-1425

CVE-2024-1425 : The WordPress plugin EmbedPress (Embed PDF, YouTube, Google Docs, Vimeo, Wistia, etc.) is affected by a stored XSS in the Google Calendar Widget Link for all versions up to 3.9.8. Root cause: insufficient input sanitization and output escaping on user-supplied attributes, enabling...

CVE-2024-1425 EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Calendar Widget Link in all versions up to, and including, 3.9.8 due to insufficient input...

PT-2024-18035 · WordPress · Embedpress

Name of the Vulnerable Software and Affected Versions: EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress versions up to, and including, 3.9.8 Description: The issue is related to Stored Cross-Site Scripti...

PT-2024-20785 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.2 Liferay DXP 7.3 before service pack 3 Liferay DXP 7.2 before fix pack 15 Description: The Calendar module in the affected software does not escape user-supplied data in the default notification emai...

CVE-2024-1425: Improper Neutralization of Input During Web Page Generation

The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Calendar Widget Link in all versions up to, and including, 3.9.8 due to insufficient input...

Huawei EMUI security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege control type vulnerability exists in the...

CVE-2024-21727

XSS vulnerability in DP Calendar component for Joomla...

CVE-2024-21727

XSS vulnerability in DP Calendar component for Joomla...

Cross site scripting

XSS vulnerability in DP Calendar component for Joomla...

CVE-2024-21727

The DP Calendar component for Joomla versions 8.0.0-8.0.14 is vulnerable to a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw could allow an attacker to execute malicious scripts in a user's browser. While the CVSS score of 6....

CVE-2024-21727 Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14

XSS vulnerability in DP Calendar component for Joomla...

CVE-2024-21727 Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14

XSS vulnerability in DP Calendar component for Joomla...

PT-2024-19021 · Joomla · Dp Calendar

Name of the Vulnerable Software and Affected Versions: DP Calendar component for Joomla affected versions not specified Description: The issue is related to a XSS vulnerability in the DP Calendar component for Joomla. There is no information provided about the estimated number of potentially...

My Calendar Plugin for WordPress < 3.4.22 SQL Injection

The WordPress My Calendar Plugin installed on the remote host is affected by a SQL Injection via the parameters from and to used in the mycalendarrestroute function which is accessible without authentication. Note that the scanner has not tested for these issues but has instead relied only on the...

CVE-2024-21727: Improper Neutralization of Input During Web Page Generation

XSS vulnerability in DP Calendar component for Joomla...

WordPress My Calendar Plugin <= 3.4.23 is vulnerable to Cross Site Scripting (XSS)

Software My Calendar Type Plugin Vulnerable versions = 3.4.23 Fixed in 3.4.24 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-25916 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0654701560fd Credits Steven Julian Required privilege...