492 matches found
Oracle Application Express 安全漏洞
Oracle Application Express is a low-code development platform from Oracle Corporation. A security vulnerability exists in the Application Express Team Calendar Plugin product for Oracle Application Express, which arises from a vulnerability in the User Account module that allows a low-privileged...
WordPress Subscriber Addons for The Events Calendar Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS)
Software Subscriber Addons for The Events Calendar Type Plugin Vulnerable versions = 5.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID faec0e8594b3 Credits Rafie...
CVE-2022-4115
The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability targeting higher privileged users...
CVE-2022-46816
Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin = 1.1.4 versions...
CVE-2022-46816
Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin = 1.1.4 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin = 1.1.4 versions...
CVE-2022-46816
CVE-2022-46816 affects WordPress Booking Ultra Pro Appointments Booking Calendar Plugin versions
CVE-2023-23813
Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.4.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.4.3 versions...
CVE-2023-23813
The WordPress plugin My Calendar (versions
CVE-2023-23813 WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.4.3 versions...
CVE-2023-28169
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in CoreFortress Easy Event calendar plugin = 1.0 versions...
CVE-2023-28169
CVE-2023-28169 affects the WordPress plugin CoreFortress Easy Event calendar (versions
Sql injection
A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This affects the function dexprocessreadytogoappointment of the file dexappointments.php. The manipulation of the argument itemnumber leads to sql injection. It is possible to initiat...
CVE-2015-10099
CVE-2015-10099 affects CP Appointment Calendar Plugin (WordPress) up to version 1.1.5. The issue is an SQL injection in the dex_process_ready_to_go_appointment function within dex_appointments.php, caused by improper handling of the itemnumber argument. The vulnerability can be triggered remotely...
CVE-2013-10023
A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcalfilterwhere of the file edcal.php. The manipulation of the argument edcalstartDate/edcalendDate leads to sql injection. The attack c...
Sql injection
A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcalfilterwhere of the file edcal.php. The manipulation of the argument edcalstartDate/edcalendDate leads to sql injection. The attack c...
CVE-2013-10023
The CVE-2013-10023 issue affects the WordPress Editorial Calendar Plugin up to version 2.6. The vulnerability is in the edcal_filter_where function in edcal.php, where manipulating the edcal_startDate/edcal_endDate parameters enables an SQL injection. Exploitation can be performed remotely. Upgra...
PT-2023-10012 · WordPress · Editorial Calendar Plugin
Name of the Vulnerable Software and Affected Versions: Editorial Calendar Plugin versions up to 2.6 Description: A critical issue has been found in the Editorial Calendar Plugin, affecting the function edcal filter where of the file edcal.php. The manipulation of the arguments edcal startDate and...