623 matches found
CVE-2022-36390
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
Cross site scripting
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390
The CVE-2022-36390 entry concerns the WordPress Totalsoft Event Calendar – Calendar plugin (versions 1.4.6 and earlier). The root cause is an authenticated reflected cross-site scripting (XSS) vulnerability in the plugin’s handling of input, which can affect authenticated users (subscriber+). Pra...
CVE-2022-36390: Improper Neutralization of Input During Web Page Generation
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
PT-2022-23350 · Totalsoft · Totalsoft Event Calendar – Calendar Plugin
Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scrip...
WordPress plugin Event Calendar – Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2022-38067
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-38067
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
Arbitrary file deletion
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-38067
CVE-2022-38067 affects the WordPress plugin Totalsoft Event Calendar – Calendar (versions
CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
PT-2022-24182 · Totalsoft · Totalsoft Event Calendar
Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue concerns an Unauthenticated Event Deletion vulnerability. Recommendations: For versions 1.4.6 and earlier, update to a version later than 1.4.6 to...
CVE-2022-38067: Undefined Security Weakness
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
WordPress plugin Totalsoft Event Calendar – Calendar 权限许可和访问控制问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Totalsoft Event...
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
Unauthenticated Event Deletion vulnerability discovered by Nguy Minh Tuan Patchstack Alliance in WordPress Event Calendar – Calendar plugin versions = 1.4.6. Solution Update the WordPress Event Calendar – Calendar plugin to the latest available version at least 1.4.7...
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Vlad Vector Patchstack in WordPress Event Calendar – Calendar plugin versions = 1.4.6. Solution Update the WordPress Event Calendar – Calendar plugin to the latest available version at least 1.4.7...