Read the docs

Offshore Web Master

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Offshore Web Master records in CISA KEV

No Offshore Web Master vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Availability Calendar 3 records MEDIUM

Records

3 records

TI-2021-06889 CVE-2021-24606 · GHSA-rj93-7769-mc4j

Availability Calendar < 1.2.1 - Authenticated SQL Injection

Priority MEDIUM 41

The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be exploited by any user a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01334 Published 2021-09-20 Fixed in 1.2.1 CWE-89
TI-2021-06887 CVE-2021-24604 · GHSA-p555-vm74-xq5v

Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting

Priority LOW 23

The Availability Calendar WordPress plugin before 1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-09-20 Fixed in 1.2.2 CWE-79
Open these records in search →