https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 07:48:12 +0000 https://cve.radiocsirt.org/vuln/cve-2023-2406 <p><strong>Affected:</strong> vcita Event Registration Calendar By vcita, vcita Online Payments – Get Paid with PayPal, Square &amp; Stripe</p> <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p><strong>Affected:</strong> vcita Event Registration Calendar By vcita, vcita Online Payments – Get Paid with PayPal, Square &amp; Stripe</p> <p>The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square &amp; Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the &#39;email&#39; parameter in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/cve-2023-2406