CVE-2022-25599

概要

参考情報

• patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-0-event-deletion-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/spiffy-calendar · Vendor Advisory

spiffy calendar のその他の脆弱性

• CVE-2024-45458中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-…
• CVE-2024-45457中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-…
• CVE-2024-38692高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows …
• CVE-2024-30528中 6.3Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10.
• CVE-2024-30427中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows …