Read the docs

Xllentech

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xllentech records in CISA KEV

No Xllentech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
English Islamic Calendar 1 record MEDIUM

Records

1 record

TI-2021-06633 CVE-2021-24341 · GHSA-cpcp-xp6m-fv6g

Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection

Priority MEDIUM 41

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01586 Published 2021-06-14 Fixed in 2.6.8 CWE-89
Open these records in search →