EUVD-2019-12658

Malware in sbrugna...

EUVD-2025-12038

Malicious code in bioql PyPI...

CVE-2019-3019

Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications component: Loan Calculator. Supported versions that are affected are 18.1, 18.2, 18.3 and 19.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2025-46442

Cross-Site Request Forgery CSRF vulnerability in Casey Johnson Loan Calculator repayment-calculator allows Stored XSS.This issue affects Loan Calculator: from n/a through = 1.3...

WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Loan Calculator versions = 1.3...

CVE-2025-46442

Cross-Site Request Forgery CSRF vulnerability in Casey Johnson Loan Calculator repayment-calculator allows Stored XSS.This issue affects Loan Calculator: from n/a through = 1.3...

CVE-2025-46442 WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Casey Johnson Loan Calculator repayment-calculator allows Stored XSS.This issue affects Loan Calculator: from n/a through = 1.3...

CVE-2025-46442 WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Casey Johnson Loan Calculator repayment-calculator allows Stored XSS.This issue affects Loan Calculator: from n/a through = 1.3...

CVE-2025-46442

CVE-2025-46442 is a CSRF to Stored XSS vulnerability affecting the WordPress Loan Calculator plugin for versions n/a through 1.3. The CVSS base score is 7.1 (HIGH). Exploitation details are not provided in the initial description beyond the CSRF/XSS combo; connected documents corroborate the CSRF...

WordPress plugin Loan Calculator vulnerable to cross-site request forgeing attack

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-46442: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Casey Johnson Loan Calculator repayment-calculator allows Stored XSS.This issue affects Loan Calculator: from n/a through = 1.3...

PT-2025-6801

Name of the Vulnerable Software and Affected Versions Mortgage Calculator / Loan Calculator plugin for WordPress versions up to, and including, 1.5.20 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'mlcalc' shortcode due to insufficient input sanitization and...

CVE-2025-0805: Improper Neutralization of Input During Web Page Generation

The Mortgage Calculator / Loan Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mlcalc' shortcode in all versions up to, and including, 1.5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

WordPress Mortgage Calculator / Loan Calculator plugin <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Mortgage Calculator / Loan Calculator versions = 1.5.20...

PT-2023-31660 · Unknown · Aerin Loan Repayment Calculator/Application Form

Name of the Vulnerable Software and Affected Versions: Aerin Loan Repayment Calculator and Application Form versions n/a through 2.9.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means tha...

WordPress Mortgage Calculator/Loan Calculator Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Mortgage Calculator/Loan Calculator has a cross-site scripting vulnerability in versions prior to 1.5.17, which ste...

CVE-2021-24828

Vulnerability summary (CVE-2021-24828) : The WordPress plugin “Mortgage Calculator / Loan Calculator” prior to version 1.5.17 does not escape certain attributes in the mlcalc shortcode output. This can enable Cross-Site Scripting (XSS) by users with as little as a Contributor role. The issue is t...

PT-2022-9477

Name of the Vulnerable Software and Affected Versions The Mortgage Calculator / Loan Calculator WordPress plugin versions prior to 1.5.17 Description The issue is related to the mlcalc shortcode not escaping some of its attributes before outputting them, which could allow users with a role as low...

CVE-2021-24828: Improper Neutralization of Input During Web Page Generation

The Mortgage Calculator / Loan Calculator WordPress plugin before 1.5.17 does not escape the some of the attributes of its mlcalc shortcode before outputting them, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

Mortgage Calculator / Loan Calculator < 1.5.17 - Contributor+ Stored Cross-Site Scripting

The plugin does not escape the some of the attributes of its mlcalc shortcode before outputting them, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks mlcalc schedule="month';alert/XSS///"...