2 matches found
CVE-2025-29003: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mva7 The Holiday Calendar the-holiday-calendar allows Stored XSS.This issue affects The Holiday Calendar: from n/a through = 1.18.2.1...
6.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
PT-2025-24139 · Unknown · Mva7 The Holiday Calendar
Name of the Vulnerable Software and Affected Versions: mva7 The Holiday Calendar versions n/a through 1.18.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in mva7 The Holiday...
6.5CVSS6AI score0.00252EPSS
SaveExploits0References3
20