Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
k may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227660. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227660 - https://vuldb.com/?ctiid.227660 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/1
CVE ID: CVE-2023-2383 State: PUBLISHED Published: 2023-04-28T17:31:03.442Z Last Updated: 2025-01-30T19:24:03.794Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.fromAddr leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227661 was assign
the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227661 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227661 - https://vuldb.com/?ctiid.227661 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/2
CVE ID: CVE-2023-2384 State: PUBLISHED Published: 2023-04-28T17:31:04.548Z Last Updated: 2024-08-02T06:19:15.152Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument dhcp.SecDnsIPByte2 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227662 is the identifier assigned to this vu
remotely. The exploit has been disclosed to the public and may be used. VDB-227662 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227662 - https://vuldb.com/?ctiid.227662 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/3
CVE ID: CVE-2023-2385 State: PUBLISHED Published: 2023-04-28T18:00:05.191Z Last Updated: 2024-08-02T06:19:14.996Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ike_policies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this v
be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227663. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227663 - https://vuldb.com/?ctiid.227663 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5
CVE ID: CVE-2023-2386 State: PUBLISHED Published: 2023-04-28T18:31:03.383Z Last Updated: 2025-01-30T19:54:28.344Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.toAddr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-2
ck remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227664. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227664 - https://vuldb.com/?ctiid.227664 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/7
CVE ID: CVE-2023-2387 State: PUBLISHED Published: 2023-04-28T19:00:05.399Z Last Updated: 2024-08-02T06:19:14.996Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument winsServer1 leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227665 was assigned to this v
remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227665 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227665 - https://vuldb.com/?ctiid.227665 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/4
CVE ID: CVE-2023-2388 State: PUBLISHED Published: 2023-04-28T19:31:03.818Z Last Updated: 2024-08-02T06:19:14.993Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.fromAddr leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227666 is the i
. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227666 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227666 - https://vuldb.com/?ctiid.227666 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/8
CVE ID: CVE-2023-2389 State: PUBLISHED Published: 2023-04-28T20:00:05.733Z Last Updated: 2024-11-22T16:02:11.124Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.emailServer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this
te the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227667. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227667 - https://vuldb.com/?ctiid.227667 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/9
CVE ID: CVE-2023-2390 State: PUBLISHED Published: 2023-04-28T20:00:07.146Z Last Updated: 2025-01-30T19:51:26.406Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ntp.server1 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227668. NOTE:
The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227668. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227668 - https://vuldb.com/?ctiid.227668 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/10
CVE ID: CVE-2023-2391 State: PUBLISHED Published: 2023-04-28T20:31:04.092Z Last Updated: 2024-08-02T06:19:14.998Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227669 was assigned to this vulnerabilit
he exploit has been disclosed to the public and may be used. The identifier VDB-227669 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227669 - https://vuldb.com/?ctiid.227669 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/11
CVE ID: CVE-2023-2392 State: PUBLISHED Published: 2023-04-28T20:31:05.126Z Last Updated: 2024-08-02T06:19:15.007Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227670 is the identifier assigned to this
k remotely. The exploit has been disclosed to the public and may be used. VDB-227670 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227670 - https://vuldb.com/?ctiid.227670 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/12
CVE ID: CVE-2023-2393 State: PUBLISHED Published: 2023-04-28T21:00:05.590Z Last Updated: 2024-08-02T06:19:15.080Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument ConfigPort.LogicalIfName leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifie
attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227671 - https://vuldb.com/?ctiid.227671 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/13
CVE ID: CVE-2023-2394 State: PUBLISHED Published: 2023-04-28T21:00:06.759Z Last Updated: 2024-08-02T06:19:15.108Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument wanName leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227672. NOTE: The vendor was contacted early about this dis
and may be used. The identifier of this vulnerability is VDB-227672. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227672 - https://vuldb.com/?ctiid.227672 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/14
CVE ID: CVE-2023-2395 State: PUBLISHED Published: 2023-04-28T21:31:03.804Z Last Updated: 2025-02-12T16:42:25.895Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227673 was assigned to this vulnerability. NOTE: The vendor was contacted early about this dis
used. The identifier VDB-227673 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227673 - https://vuldb.com/?ctiid.227673 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/15
CVE ID: CVE-2023-2396 State: PUBLISHED Published: 2023-04-28T22:00:05.104Z Last Updated: 2024-08-02T06:19:15.188Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227674 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this dis
e used. VDB-227674 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227674 - https://vuldb.com/?ctiid.227674 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/16
CVE ID: CVE-2023-2397 State: PUBLISHED Published: 2023-04-28T22:00:06.520Z Last Updated: 2024-08-02T06:19:14.991Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Mobile Comparison Website Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_field. The manipulation of the argument Field Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabil
ted remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227675. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227675 - https://vuldb.com/?ctiid.227675 - https://github.com/sunyucheng0405/bug_report/blob/main/XSS-1.md
CVE ID: CVE-2023-2398 State: PUBLISHED Published: 2023-06-12T17:28:22.252Z Last Updated: 2025-01-03T14:49:44.060Z Vendors: Unknown Products: Icegram Engage Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/16d47d20-58aa-4d04-9275-fd91ce926ff3
CVE ID: CVE-2023-2399 State: PUBLISHED Published: 2023-06-19T10:52:51.650Z Last Updated: 2024-12-11T20:45:46.669Z Vendors: Unknown Products: QuBot Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d
CVE ID: CVE-2023-2400 State: PUBLISHED Published: 2023-06-20T16:19:50.629Z Last Updated: 2024-12-09T18:29:48.495Z Vendors: Devolutions Products: Server Description: Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0014
CVE ID: CVE-2023-2401 State: PUBLISHED Published: 2023-06-19T10:52:46.396Z Last Updated: 2024-12-12T16:48:32.160Z Vendors: Unknown Products: QuBot Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0746ea56-dd88-4fc3-86a3-54408eef1f94
CVE ID: CVE-2023-2402 State: PUBLISHED Published: 2023-06-09T05:33:17.761Z Last Updated: 2024-11-23T13:18:22.483Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: nik00726 Products: Photo Gallery Slideshow & Masonry Tiled Gallery Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject ar
o insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/51a1c2de-56be-4487-874a-a916e8a6992a?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2808029%40wp-responsive-photo-gallery%2Ftags%2F1.0.13&new=2905480%40wp-responsive-photo-gallery%2Ftags%2F1.0.14
CVE ID: CVE-2023-2404 State: PUBLISHED Published: 2023-06-03T04:35:16.352Z Last Updated: 2024-12-20T23:57:15.067Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: vcita Products: CRM and Lead Management by vcita Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors an
put escaping. This makes it possible for authenticated attackers with the edit_posts capability, such as contributors and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e26ccd06-22e0-4d91-a53a-df6ead8a8e3b?source=cve - https://plugins.trac.wordpress.org/browser/crm-customer-relationship-management-by-vcita/trunk/vcita-callback.php - https://blog.jonh.eu/blog/security-vulnerabilities-in-wordpress-plugins-by-vcita
CVE ID: CVE-2023-2405 State: PUBLISHED Published: 2023-06-03T04:35:11.989Z Last Updated: 2024-12-20T23:58:43.091Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: vcita Products: CRM and Lead Management by vcita Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.6.2. This is due to missing nonce validation in the vcita-callback.php file. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious JavaScript via a forged request granted they can trick a site ad
rs to modify the plugin's settings and inject malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0f75c6bf-1b93-49d5-b5fb-e59b4e67432f?source=cve - https://plugins.trac.wordpress.org/browser/crm-customer-relationship-management-by-vcita/trunk/vcita-callback.php - https://blog.jonh.eu/blog/security-vulnerabilities-in-wordpress-plugins-by-vcita
CVE ID: CVE-2023-2406 State: PUBLISHED Published: 2023-06-03T04:35:12.933Z Last Updated: 2024-12-20T23:58:18.884Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: vcita Products: Event Registration Calendar By vcita, Online Payments – Get Paid with PayPal, Square & Stripe Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 1