Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5125 State: PUBLISHED Published: 2025-06-20T06:00:11.825Z Last Updated: 2025-06-23T20:22:09.795Z Vendors: Unknown Products: Custom Post Carousels with Owl Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/aaf9e3f8-b312-432d-a635-6fe89ff8d13f/
CVE ID: CVE-2025-5126 State: PUBLISHED Published: 2025-05-24T15:00:10.190Z Last Updated: 2025-10-15T13:18:48.138Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C) Vendors: Teledyne FLIR Products: AX8 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the af
oit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310204 - https://vuldb.com/?ctiid.310204 - https://vuldb.com/?submit.570725 - https://vuldb.com/?submit.572266 - https://vuldb.com/?submit.572275 - https://vuldb.com/?submit.572277 - https://github.com/YZS17/CVE/blob/main/Remote%20Command%20Injection%20in%20parameter%20%24minute.md - https://github.com/YZS17/CVE/blob/main/Remote%20Comm
main/Remote%20Command%20Injection%20in%20parameter%20%24minute.md - https://github.com/YZS17/CVE/blob/main/Remote%20Command%20Injection%20in%20parameter%20%24hour.md
CVE ID: CVE-2025-5127 State: PUBLISHED Published: 2025-05-24T15:31:04.412Z Last Updated: 2025-10-15T13:18:44.998Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: Teledyne FLIR Products: AX8 Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in Teledyne FLIR AX8 up to 1.46.16. This issue affects some unknown processing of the file /prod.php. Executing manipulation of the argument cmd can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.49.16 is capable of addressing this issue. It is recommended to upgrade the affected component. The vendor p
o version 1.49.16 is capable of addressing this issue. It is recommended to upgrade the affected component. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310205 - https://vuldb.com/?ctiid.310205 - https://vuldb.com/?submit.572265 - https://github.com/YZS17/CVE/blob/main/XSS%20vulnerability%20in%20FLIR%20AX8.md
CVE ID: CVE-2025-5128 State: PUBLISHED Published: 2025-05-24T16:00:12.550Z Last Updated: 2025-05-28T17:40:16.116Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ScriptAndTools Products: Real-Estate-website-in-PHP Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310206 - https://vuldb.com/?ctiid.310206 - https://vuldb.com/?submit.570957 - https://www.websecurityinsights.my.id/2025/05/script-and-tools-real-estate-management.html
CVE ID: CVE-2025-5129 State: PUBLISHED Published: 2025-05-24T16:31:04.360Z Last Updated: 2025-05-28T17:40:10.703Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Sangfor Products: 零信任访问控制系统 aTrust Problem Types: CWE-427, CWE-426 Description: A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be u
tack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310207 - https://vuldb.com/?ctiid.310207 - https://vuldb.com/?submit.571267 - https://www.notion.so/Sangfor-Zero-Trust-Access-Control-System-ATrust-Privilege-Escalation-Vulnerability-1eab06dd544b802b87cdd6ba6b70cce9 - https://drive.google.com/file/d/1_zGvKXIFLdh5RtxauvNYSa52YONJmY9q/view
CVE ID: CVE-2025-5130 State: PUBLISHED Published: 2025-05-24T20:00:10.664Z Last Updated: 2025-05-28T17:40:05.167Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Tmall Products: Demo Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, versi
ic and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310209 - https://vuldb.com/?ctiid.310209 - https://vuldb.com/?submit.571893 - https://github.com/bdkuzma/vuln/issues/9
CVE ID: CVE-2025-5131 State: PUBLISHED Published: 2025-05-24T20:31:04.813Z Last Updated: 2025-05-28T17:39:57.794Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Tmall Products: Demo Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details
public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310210 - https://vuldb.com/?ctiid.310210 - https://vuldb.com/?submit.571901 - https://github.com/bdkuzma/vuln/issues/10
CVE ID: CVE-2025-5132 State: PUBLISHED Published: 2025-05-24T21:00:10.998Z Last Updated: 2025-05-28T17:39:52.642Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Tmall Products: Demo Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was c
oes not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310211 - https://vuldb.com/?ctiid.310211 - https://vuldb.com/?submit.571924 - https://github.com/bdkuzma/vuln/issues/11
CVE ID: CVE-2025-5133 State: PUBLISHED Published: 2025-05-24T21:31:04.186Z Last Updated: 2025-05-28T17:39:46.971Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Tmall Products: Demo Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vend
to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310212 - https://vuldb.com/?ctiid.310212 - https://vuldb.com/?submit.571932 - https://github.com/bdkuzma/vuln/issues/12
CVE ID: CVE-2025-5134 State: PUBLISHED Published: 2025-05-24T22:00:07.830Z Last Updated: 2025-05-28T17:39:41.381Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Tmall Products: Demo Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an unknown functionality of the component Buy Item Page. The manipulation of the argument Detailed Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details
be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310213 - https://vuldb.com/?ctiid.310213 - https://vuldb.com/?submit.571939 - https://github.com/bdkuzma/vuln/issues/13
CVE ID: CVE-2025-5135 State: PUBLISHED Published: 2025-05-24T22:31:04.707Z Last Updated: 2025-05-28T17:39:35.879Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Tmall Products: Demo Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issue is some unknown functionality of the file /tmall/admin/ of the component Product Details Page. The manipulation of the argument Product Name/Product Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by t
ly. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310214 - https://vuldb.com/?ctiid.310214 - https://vuldb.com/?submit.571941 - https://github.com/bdkuzma/vuln/issues/14
CVE ID: CVE-2025-5136 State: PUBLISHED Published: 2025-05-24T23:31:04.556Z Last Updated: 2025-05-28T17:39:25.386Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tmall Products: Demo Problem Types: CWE-330, CWE-310 Description: A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown part of the file /tmall/order/pay/ of the component Payment Identifier Handler. The manipulation leads to insufficiently random values. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and ma
n attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310215 - https://vuldb.com/?ctiid.310215 - https://vuldb.com/?submit.571960 - https://github.com/bdkuzma/vuln/issues/15
CVE ID: CVE-2025-5137 State: PUBLISHED Published: 2025-05-25T00:00:10.371Z Last Updated: 2025-06-03T09:50:24.612Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getfiles of the component Incomplete Fix CVE-2018-9175. The manipulation of the argument refiles leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310218 - https://vuldb.com/?ctiid.310218 - https://vuldb.com/?submit.571933 - https://vuldb.com/?submit.585711 - https://github.com/CyberPunk-Infernity/Advisory/issues/2
CVE ID: CVE-2025-5138 State: PUBLISHED Published: 2025-05-25T00:31:04.887Z Last Updated: 2025-06-20T04:07:17.718Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: Bitwarden Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Bitwarden up to 2.25.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor was contacted early about t
be used. The real existence of this vulnerability is still doubted at the moment. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310219 - https://vuldb.com/?ctiid.310219 - https://vuldb.com/?submit.572263 - https://github.com/YZS17/CVE/blob/main/PDF%20XSS%20vulnerability%20in%20file%20upload%20function%20of%20%20Bitwarden.md
CVE ID: CVE-2025-5139 State: PUBLISHED Published: 2025-05-25T01:00:07.429Z Last Updated: 2025-06-11T13:38:12.795Z Severity: N/A (CVSS 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: n/a Products: Qualitor Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Qualitor 8.20/8.24. It has been rated as critical. Affected by this issue is some unknown functionality of the file /html/ad/adconexaooffice365/request/testaConexaoOffice365.php of the component Office 365-type Connection Handler. The manipulation of the argument nmconexao leads to command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to b
jection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 8.20.56 and 8.24.31 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310220 - https://vuldb.com/?ctiid.310220 - https://vuldb.com/?submit.572477 - https://www.youtube.com/watch?v=Dq4C5s9Uwyo - https://gist.githubusercontent.com/MatheuZSecurity/fe221fd5b2e5393abf76be42f11f52c3/raw/e8d9c63885f0b83b3374db3d31dbe2c69c868334/poc.sh
CVE ID: CVE-2025-5140 State: PUBLISHED Published: 2025-05-25T01:31:06.324Z Last Updated: 2025-05-28T17:39:04.484Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Seeyon Products: Zhiyuan OA Web Application System Problem Types: CWE-918 Description: A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This affects the function this.oursNetService.getData of the file com\ours\www\ehr\openPlatform1\open4ClientType\controller\ThirdMenuController.class. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and ma
ide request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310221 - https://vuldb.com/?ctiid.310221 - https://vuldb.com/?submit.574440 - https://wx.mail.qq.com/s?k=i0-p-2N4MHcFOeM00E
CVE ID: CVE-2025-5141 State: PUBLISHED Published: 2025-06-17T19:30:51.781Z Last Updated: 2025-08-29T20:11:13.423Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Fortra Products: Core Privileged Access Manager (BoKS) Problem Types: CWE-524 Description: A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
s low privilege local users to dump data from the cache. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fortra.com/security/advisories/product-security/fi-2025-008
CVE ID: CVE-2025-5142 State: PUBLISHED Published: 2025-05-30T09:22:06.854Z Last Updated: 2025-05-30T12:52:15.184Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: pluginsandsnippets Products: Simple Page Access Restriction Problem Types: CWE-352 Description: The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31. This is due to missing nonce validation and capability checks in the settings save handler in the settings.php script. This makes it possible for unauthenticated attackers to (1) enable or disable access protection on all post types or taxonomies, (2) force ever
for unauthenticated attackers to (1) enable or disable access protection on all post types or taxonomies, (2) force every new page/post to be public or private, regardless of meta-box settings, (3) cause a silent wipe of all plugin data when it’s later removed, or (4) to conduct URL redirection attacks via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/657e2a4d-7e10-495d-8352-1adc0cb89e83?source=cve - https://wordpress.org/plugins/simple-page-access-restriction/#developers - https://plugins.trac.wordpres
83?source=cve - https://wordpress.org/plugins/simple-page-access-restriction/#developers - https://plugins.trac.wordpress.org/browser/simple-page-access-restriction/tags/1.0.31/includes/admin/settings/settings.php#L16 - https://plugins.trac.wordpress.org/changeset/3300680/
CVE ID: CVE-2025-5143 State: PUBLISHED Published: 2025-06-21T06:42:48.687Z Last Updated: 2025-06-23T20:47:20.282Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: realmag777 Products: TableOn – WordPress Posts Table Filterable Problem Types: CWE-79 Description: The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableon_popup_iframe_button shortcode in all versions up to, and including, 1.0.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject
lied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/447d3aa6-2ed3-4da3-b9e8-fc7792c8c29a?source=cve - https://plugins.trac.wordpress.org/browser/posts-table-filterable/trunk/index.php#L1630 - https://wordpress.org/plugins/posts-table-filterable/#developers - https://plugins.trac.wordpress.org/changeset/3315337/
CVE ID: CVE-2025-5144 State: PUBLISHED Published: 2025-06-11T12:22:52.030Z Last Updated: 2025-06-11T13:04:30.359Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: theeventscalendar Products: The Events Calendar Problem Types: CWE-79 Description: The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page
l access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/56822fe5-352c-4269-9fab-d8c796362b74?source=cve - https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.12.0.1/vendor/bootstrap-datepicker/js/bootstrap-datepicker.min.js - https://github.com/uxsolutions/bootstrap-datepicker/blob/master/js/bootstrap-datepicker.js#L131 - https://bootstrap-datepicker.readthedocs.io/en/latest/index.html#data-api - https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.13.0/vendor/bootstrap-d
test/index.html#data-api - https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.13.0/vendor/bootstrap-datepicker/js/bootstrap-datepicker.min.js - https://plugins.trac.wordpress.org/changeset/3307301/