Read the docs

dwbooster

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

dwbooster records in CISA KEV

No dwbooster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Appointment Hour Booking 8 records LOW Calendar Event Multi View 2 records MEDIUM Corner Ad 2 records MEDIUM Cp Blocks 2 records LOW Calculated Fields Form 1 record LOW Cp Contact Form 1 record LOW Cp Image Store With Slideshow 1 record MEDIUM Loading Page With Loading Screen 1 record LOW

Records

2 records in Calendar Event Multi View · all components

TI-2022-02639 CVE-2022-2846 · GHSA-cjc3-36xg-wx7g

Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS

Priority MEDIUM 53

The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fiel…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02753 Published 2022-08-16 Fixed in 1.4.07 CWE-79
TI-2021-06785 CVE-2021-24498 · GHSA-556c-5rxg-4747

Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Priority LOW 33

The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php), leading to a reflected Cross-Site Scrip…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03536 Published 2021-08-02 Fixed in 1.4.01 CWE-79
Open these records in search →