EUVD-2022-39103

Malicious code in bioql PyPI...

CVE-2022-36390

Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-36390

Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

Cross site scripting

Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-36390

The CVE-2022-36390 entry concerns the WordPress Totalsoft Event Calendar – Calendar plugin (versions 1.4.6 and earlier). The root cause is an authenticated reflected cross-site scripting (XSS) vulnerability in the plugin’s handling of input, which can affect authenticated users (subscriber+). Pra...

PT-2022-23350 · Totalsoft · Totalsoft Event Calendar – Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scrip...

CVE-2022-38067

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

Arbitrary file deletion

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067

CVE-2022-38067 affects the WordPress plugin Totalsoft Event Calendar – Calendar (versions

PT-2022-24182 · Totalsoft · Totalsoft Event Calendar

Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue concerns an Unauthenticated Event Deletion vulnerability. Recommendations: For versions 1.4.6 and earlier, update to a version later than 1.4.6 to...

WordPress plugin Totalsoft Event Calendar – Calendar 权限许可和访问控制问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Totalsoft Event...