2 matches found
CVE-2025-58862: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily connect-daily-web-calendar allows Stored XSS.This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through = 1.5...
6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CVE-2006-1508: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...
4.3CVSS5.9AI score0.02668EPSS
SaveExploits6References1
20