Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 9:24 a.m.•17 views

CVE-2024-30427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.7...

7.1CVSS8.6AI score0.00414EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/29 2:15 p.m.•24 views

CVE-2024-30427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.7...

6.1CVSS6.9AI score0.00414EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/29 1:22 p.m.•30 views

CVE-2024-30427 WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.7...

7.1CVSS6.9AI score0.00414EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 1:22 p.m.•94 views

CVE-2024-30427

The Spiffy Calendar WordPress plugin (versions through 4.9.7 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) issue caused by the improper neutralization of input during web page generation. This vulnerability allows unauthenticated attackers to inject malicious scripts into web pages. T...

6.1CVSS8.6AI score0.00414EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/29 1:22 p.m.•38 views

CVE-2024-30427 WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.7...

5.4CVSS7.1AI score0.00414EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/03/28 12:00 a.m.•33 views

WordPress Spiffy Calendar Plugin <= 4.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Spiffy Calendar Type Plugin Vulnerable versions = 4.9.7 Fixed in 4.9.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30427 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID e5917dca625b Credits Dimas Maulana Required privileg...

7.1CVSS6.5AI score0.00414EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder