3 matches found
EUVD-2025-18097
Malicious code in bioql PyPI...
6.4CVSS6.6AI score0.00258EPSS
SaveExploits0References7
CVE-2025-5144
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
5.4CVSS5.9AI score0.00258EPSS
SaveExploits0References6
CVE-2025-5144: Improper Neutralization of Input During Web Page Generation
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
6.4CVSS6AI score0.00258EPSS
SaveExploits0References1
20