PT-2025-33535 · WordPress · Intl Datetime Calendar

Name of the Vulnerable Software and Affected Versions: Intl DateTime Calendar plugin for WordPress versions up to and including 1.0.1 Description: The Intl DateTime Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting via the date parameter due to insufficient input...

CVE-2025-43490

creationtimestamp| type| source ---|---|--- 2025-08-15 20:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwhqbvmf252t...

GHSA-FX9R-RJ68-7P69

creationtimestamp| type| source ---|---|--- 2025-08-15 20:06:58+00:00| seen| Telegram/xABvtDM683qUlb5TwSwTRL5rEA2jvwvXttz85sGuSGuTJcE...

CVE-2025-20263

creationtimestamp| type| source ---|---|--- 2025-08-15 11:00:11+00:00| seen| https://t.me/truesecator/7332 2025-08-18 13:07:31+00:00| seen| https://social.circl.lu/users/circl/statuses/115049919301554545...

CVE-2025-7641

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:05+00:00| seen| Telegram/zRXqhZ-jixs240ATf2IPfytNh02FXQVO9ez6X6kk3Th2RHo...

CVE-2025-7688

creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:04+00:00| seen| Telegram/u7D7NpNU7NTldUTQjcgkxVFGcq8oiXUSuhjPBH0vZrzuK6I...

CVE-2025-8451

creationtimestamp| type| source ---|---|--- 2025-08-15 07:05:07+00:00| seen| Telegram/p26ToaU-j6s7XFsyYzgmxp18T63fuKDJbkprFcNqWYtREKw...

CVE-2025-9006

creationtimestamp| type| source ---|---|--- 2025-08-15 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwg6jfdtrt2x...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010

Itsourcecode Online Tour and Travel Management System 1.0 is affected by a SQL injection in /admin/booking_report.php via the from_date parameter. The issue allows remote exploitation and the exploit has been disclosed publicly. The vulnerability stems from improper handling of the from_date inpu...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-26470

creationtimestamp| type| source ---|---|--- 2025-08-15 04:04:00+00:00| seen| Telegram/11MslpeCq-J82D9CGhHRRtESH6Efxmb5XS6sXq2yJZRpH0k...

CVE-2025-8993

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-8993

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-8993 itsourcecode Online Tour and Travel Management System expense_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-8993

The CVE-2025-8993 entry concerns itsourcecode Online Tour and Travel Management System 1.0. The vulnerability resides in the /admin/expense_report.php file, where manipulation of the from_date parameter enables SQL injection. This flaw could be triggered remotely, and multiple sources confirm tha...

CVE-2025-8993 itsourcecode Online Tour and Travel Management System expense_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

itsourcecode Online Tour and Travel Management System 安全漏洞

itsourcecode Online Tour and Travel Management System is a itsourcecode open source online tour and travel management system. A security vulnerability exists in itsourcecode Online Tour and Travel Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of t...