CVE-2026-77705

CVE-2026-77705 affects the Booking for Appointments and Events Calendar WordPress plugin (also known as Amelia ) in versions prior to 2.4.10 . The vulnerability stems from a missing authorization check when editing a customer or employee record: the plugin does not verify that the user performing...

CVE-2026-42840 ERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals

An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...

Cost of Data Breaches Rose in 2009

The cost of a data breach increased last year to $204 per compromised customer record, according to the Ponemon Institute’s annual study. The average total cost of a data breach rose from $6.65 million in 2008 to $6.75 million in 2009. Read the full article. IDG News...