PRODUCT PROFILE

registrations_for_the_events_calendar

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-248762025/10/04

Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

registrations_for_the_events_calendarPoC 已收录

CVSS6.1

严重CVE-2021-249432021/12/07

Registrations for the Events Calendar < 2.7.6 - SQL Injection

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL injection.

registrations_for_the_events_calendarPoC 已收录

CVSS9.8EPSS 52.7%