Vendors / Room 34 Creative Services, LLC Room 34 Creative Services, LLC Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Room 34 Creative Services, LLC records in CISA KEV No Room 34 Creative Services, LLC vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Server-Side Request Forgery (SSRF) vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Absolute Path Traversal,…
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00594 · Published 2024-05-17 · No fix listed CWE-22
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-07-13 · No fix listed CWE-79
Priority LOW 25
The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00604 · Published 2022-05-30 · Fixed in 1.4.0 CWE-79
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0