CVE-2024-55227

CVE-2024-55227 affects Dolibarr 21.0.0-beta in the Events/Agenda module. The vulnerability is a cross-site scripting (XSS) flaw in the Title parameter that can lead to arbitrary web-script execution. The NVD/CVSS details indicate a critical impact (CVSS v3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H, ...

CVE-2024-13408

creationtimestamp| type| source ---|---|--- 2025-01-24 12:04:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2891 2025-01-24 12:44:03+00:00| seen| https://t.me/cvedetector/16271 2025-02-06 02:43:27+00:00| seen| Telegram/B35eMhkmopkWcVCMqbrchLg4cbwfDTB1gR0fIAR6-w0qUL...

RHSA-2024:1780

creationtimestamp| type| source ---|---|--- 2025-01-24 06:12:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2874 2025-01-31 01:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3545...

CVE-2024-12118

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the htmltag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2024-12118 The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the htmltag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2024-12118

CVE-2024-12118 is a stored XSS in The Events Calendar WordPress plugin (versions

CVE-2024-12118 The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the htmltag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2025-1755 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar plugin for WordPress versions up to, and including, 6.9.0 Description: The issue is related to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html tag attribute due to insufficient input...

WordPress plugin The Events Calendar 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress The Events Calendar plugin <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin The Events Calendar versions = 6.9.0...

GHSA-FPW7-8GJC-JWQJ Cache confusion in Jenkins Eiffel Broadcaster Plugin

The Jenkins Eiffel Broadcaster Plugin allows events published to RabbitMQ to be signed using certificate credentials. To improve performance, the plugin caches some data from the credential. Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key. Thi...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

CVE-2025-23610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23610 WordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23610 WordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ultimate Events allows Reflected XSS. This issue affects Ultimate Events: from n/a through 1.3.3...

CVE-2025-23610

CVE-2025-23610 is a reflected XSS vulnerability in the Ultimate Events WordPress plugin. The issue is described as Improper Neutralization of Input During Web Page Generation, affecting Ultimate Events versions from n/a up to 1.3.3. Connected Red Hat advisory (RH:CV E-2025-23610) repeats the same...

CVE-2024-12879

creationtimestamp| type| source ---|---|--- 2025-01-22 06:03:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2519 2025-01-22 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcpqffaax2f 2025-01-22 06:44:22+00:00| seen|...

WordPress plugin Ultimate Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-22349

creationtimestamp| type| source ---|---|--- 2025-01-20 18:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2370 2025-01-20 18:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzk6pk327 2025-01-20 19:14:31+00:00| seen|...

GHSA-VG6X-RCGG-RJX6

creationtimestamp| type| source ---|---|--- 2025-01-20 15:55:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113861495371199240 2025-01-20 16:01:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2362 2025-01-25 00:57:37+00:00| seen|...