Timetable And Event Schedule Security Vulnerabilities and Issues — Timetable And Event Schedule CVE List

Lucene search

MotopressTimetable And Event Schedule

3 matches found

CVE•added 2021/09/13 6:15 p.m.•48 views

CVE-2021-24724

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s

5.4CVSS5.3AI score0.00252EPSS

CVE•added 2024/08/01 9:15 p.m.•36 views

CVE-2024-39630

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13.

5.5CVSS6.4AI score0.00146EPSS

CVE•added 2021/09/20 10:15 a.m.•32 views

CVE-2021-24584

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such at...

5.4CVSS5.3AI score0.00161EPSS