135 matches found
PT-2023-14546 · Unknown · Yannick Lefebvre Community Events
Name of the Vulnerable Software and Affected Versions: Yannick Lefebvre Community Events plugin versions = 1.4.8 Description: The issue is related to a Stored Cross-Site Scripting vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 1.4.8, update to a...
CVE-2022-44742: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin = 1.4.8 versions...
WordPress Community Events plugin <= 1.4.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Hoang Van Hiep sk4rl1ghT in the WordPress Community Events plugin versions = 1.4.8. Solution Update the WordPress Community Events plugin to the latest available version at least 1.4.9...
WordPress The Community Events plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...
CVE-2021-24496
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...
CVE-2021-24496
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...
Cross site scripting
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...
CVE-2021-24496 Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...
CVE-2021-24496
Affected software: WordPress Community Events plugin (before 1.4.8). Root cause: the plugin does not sanitize, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page. Impact (as described): reflected Cross‑Site Scripting executed ...
WordPress 插件跨站脚本漏洞
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...
CVE-2021-24496: Improper Neutralization of Input During Web Page Generation
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...
Krakow's Commitment to a Sustainable Office and Community
Written by Courtney Hadden, Corporate Sustainability, and Karolina Galeziowska, Krakow Sustainability Team Lead As an essential part of the Internet for over 20 years, Akamai believes it is our responsibility to help create digital experiences that are fast, intelligent and secure, while caring f...
FreeBSD : wordpress -- multiple issues (4740174c-82bb-11e8-a29a-00e04c1ea73d)
wordpressdevelopers reports : Taxonomy: Improve cache handling for term queries. Posts, Post Types: Clear post password cookie when logging out. Widgets: Allow basic HTML tags in sidebar descriptions on Widgets admin screen. Community Events Dashboard: Always show the nearest WordCamp if one is...
WordPress Community Events Plugin < 1.4 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112038";...
Sql injection
SQL injection vulnerability in WordPress Community Events plugin before 1.4...
CVE-2015-3313
SQL injection vulnerability in WordPress Community Events plugin before 1.4...
CVE-2015-3313
CVE-2015-3313 details a SQL injection in the WordPress plugin Community Events (versions prior to 1.4). The vulnerability stems from inadequate input validation in the plugin’s SQL construction, with the CNVD entry noting exploitation possible via the GET parameter (notably the vulnerable eventye...
CVE-2015-3313
SQL injection vulnerability in WordPress Community Events plugin before 1.4...
