CVE-2022-22682

CVE-2022-22682 affects Synology Calendar: an XSS flaw in Event Management prior to version 2.4.5-10930. The issue arises from improper neutralization of input during web page generation, enabling an authenticated remote attacker to inject arbitrary script/HTML through unspecified vectors. Impact ...

SAMSUNG Calendar 安全漏洞

Samsung Calendar, a calendar module for Samsung mobile devices, is vulnerable to information disclosure in versions prior to Samsung Calendar 12.3.05.10000. The vulnerability stems from a lack of protection for information in the calendar, which can be exploited to gain access to the calendar...

Synology Calendar 跨站脚本漏洞

Synology Calendar is a file protection program from Synology Inc. of Taiwan, China that runs on Synology NAS Network Storage Server devices. A cross-site scripting vulnerability exists in Synology Calendar versions prior to 2.4.5-10930. The vulnerability stems from the program's lack of data...

CVE-2022-22682

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2022-33705

Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READCALENDAR permission...

CVE-2022-33705

Summary: CVE-2022-33705 describes an information disclosure in Samsung Calendar prior to version 12.3.05.10000, where an attacker can access calendar schedules without the READ_CALENDAR permission. The issue stems from insufficient protection of calendar data (information exposure) and is documen...

PT-2022-21821 · Calendar · Calendar

Name of the Vulnerable Software and Affected Versions: Calendar versions prior to 12.3.05.10000 Description: The issue allows an attacker to access the calendar schedule without the required READ CALENDAR permission, potentially exposing sensitive information. Recommendations: For versions prior ...

WordPress Modern Events Calendar Lite Plugin < 6.4.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.126054";...

dutycalendar.com Cross Site Scripting vulnerability OBB-2669116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 30 XSS

According to its self-reported version number, Zimbra Collaboration Server is affected by a cross-site scripting XSS vulnerability in the Calendar feature, as exploited in the wild starting in December 2021. An attacker can place HTML containing executable JavaScript inside element attributes. Th...

Malicious code in @zohocalendar/date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54ac2c0d6ff767b9cffa8d41103fdf6e8e82c6a74c6898243f4ef5d6d836909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533

CVE-2022-30533 affects the WordPress Modern Events Calendar Lite plugin (versions before 6.3.0). Vulnerability type: authenticated stored cross-site scripting (XSS) in the plugin, enabling an authenticated attacker to inject arbitrary scripts that run in a victim’s browser via unspecified vectors...

CVE-2022-31059

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse’s default Conte...

Cross site scripting

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse’s default Conte...

CVE-2022-31059 Discourse Calendar Event names susceptible to Cross-site Scripting

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse’s default Conte...