Read the docs

vcita

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

vcita records in CISA KEV

No vcita vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Online Booking & Scheduling Calendar 19 records MEDIUM Crm And Lead Management By Vcita 4 records LOW Online Payments - Get Paid With Paypal, Square & Stripe 3 records LOW Contact Form And Calls To Action By Vcita 2 records LOW Contact Form Builder By Vcita 2 records LOW Event Registration Calendar By Vcita 2 records LOW

Records

2 records in Event Registration Calendar By Vcita · all components

TI-2023-02260 CVE-2023-2406 · GHSA-g4r7-hv6x-5c72

Cross-site scripting in vcita Event Registration Calendar By vcita

Priority LOW 30

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00755 Published 2023-06-03 No fix listed CWE-79
TI-2023-02261 CVE-2023-2407 · GHSA-m4qh-7xhr-7xq4

Cross-site request forgery in vcita Event Registration Calendar By vcita

Priority LOW 29

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site Request Forgery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00419 Published 2023-06-03 No fix listed CWE-352
Open these records in search →