exploitDog

CVE-2025-32597

Опубликовано: 09 апр. 2025

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily allows Cross-Site Scripting (XSS). This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through 1.4.8.

Ссылки

https://patchstack.com/database/wordpress/plugin/connect-daily-web-calendar/vulnerability/wordpress-wordpress-events-calendar-plugin-connectdaily-plugin-1-4-8-csrf-to-cross-site-scripting-vulnerability?_s_id=cve

EPSS

Процентиль: 24%

0.0008

Низкий

7.1 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-pg6j-c3fc-2fvj

CVSS3: 7.1

github

10 месяцев назад

Cross-Site Request Forgery (CSRF) vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily allows Cross-Site Scripting (XSS). This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through 1.4.8.

EPSS

Процентиль: 24%

0.0008

Низкий

7.1 High

CVSS3

Дефекты

CWE-352