CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8293

CVE-2025-8293 affects the WordPress plugin Intl DateTime Calendar. The issue is a Stored Cross-Site Scripting via the date parameter in all versions up to 1.0.1, caused by insufficient input sanitization and output escaping. Exploitation requires Contributor-level (or higher) access with authenti...

CVE-2021-47650

creationtimestamp| type| source ---|---|--- 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

PT-2025-33535 · WordPress · Intl Datetime Calendar

Name of the Vulnerable Software and Affected Versions: Intl DateTime Calendar plugin for WordPress versions up to and including 1.0.1 Description: The Intl DateTime Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting via the date parameter due to insufficient input...

CVE-2025-8293: Improper Neutralization of Input During Web Page Generation

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-43490

creationtimestamp| type| source ---|---|--- 2025-08-15 20:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwhqbvmf252t...

GHSA-FX9R-RJ68-7P69

creationtimestamp| type| source ---|---|--- 2025-08-15 20:06:58+00:00| seen| Telegram/xABvtDM683qUlb5TwSwTRL5rEA2jvwvXttz85sGuSGuTJcE...

CVE-2025-20263

creationtimestamp| type| source ---|---|--- 2025-08-15 11:00:11+00:00| seen| https://t.me/truesecator/7332 2025-08-18 13:07:31+00:00| seen| https://social.circl.lu/users/circl/statuses/115049919301554545...

CVE-2025-7641

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:05+00:00| seen| Telegram/zRXqhZ-jixs240ATf2IPfytNh02FXQVO9ez6X6kk3Th2RHo...

CVE-2025-7688

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:04+00:00| seen| Telegram/u7D7NpNU7NTldUTQjcgkxVFGcq8oiXUSuhjPBH0vZrzuK6I...

CVE-2025-8451

creationtimestamp| type| source ---|---|--- 2025-08-15 07:05:07+00:00| seen| Telegram/p26ToaU-j6s7XFsyYzgmxp18T63fuKDJbkprFcNqWYtREKw...

CVE-2025-9006

creationtimestamp| type| source ---|---|--- 2025-08-15 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwg6jfdtrt2x...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010

Itsourcecode Online Tour and Travel Management System 1.0 is affected by a SQL injection in /admin/booking_report.php via the from_date parameter. The issue allows remote exploitation and the exploit has been disclosed publicly. The vulnerability stems from improper handling of the from_date inpu...

CVE-2025-26470

creationtimestamp| type| source ---|---|--- 2025-08-15 04:04:00+00:00| seen| Telegram/11MslpeCq-J82D9CGhHRRtESH6Efxmb5XS6sXq2yJZRpH0k...

CVE-2025-8993

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...