CVE-2025-39372 – WordPress Events Calendar Registration & Tickets Cross-site Scripting

May 19, 2025

CVE ID : CVE-2025-39372

Published : May 19, 2025, 8:15 p.m. | 2 hours, 33 minutes ago

Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in elbisnero WordPress Events Calendar Registration & Tickets allows Reflected XSS.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through 2.6.0.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-39380 – Mojoomla Hospital Management System File Upload Vulnerability

Next Article CVE-2025-39366 – Rocket Apps wProject Privilege Escalation Vulnerability

Highlights

CVE-2025-6406 – Campcodes Online Hospital Management System SQL Injection Vulnerability

June 21, 2025

CVE ID : CVE-2025-6406

Published : June 21, 2025, 2:15 p.m. | 4 hours, 35 minutes ago

Description : A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Double-Edged Sustainability Sword Of AI In Web Design

Top 12 Reasons Enterprises Choose Node.js Development Services for Scalable Growth

GitHub’s coding agent can now be launched from anywhere on platform using new Agents panel

Stop writing tests: Automate fully with Generative AI

I’m a diehard Pixel fan, but I’m not upgrading to the Pixel 10. Here’s why

Google Pixel Watch 4 vs. Samsung Galaxy Watch 8: I compared the two best Androids, and here’s the winner

Get a free Amazon gift card up to $300 when you preorder a new Google Pixel 10 phone – here’s how

Everything announced at Made by Google 2025: Pixel 10 Pro, Fold, Watch 4, and more

Copy Errors as Markdown to Share With AI in Laravel 12.25

Copy Errors as Markdown to Share With AI in Laravel 12.25

Deconstructing the Request Lifecycle in Sitecore Headless – Part 2: SSG and ISR Modes in Next.js

Susan Etlinger, AI Analyst and Industry Watcher on Building Trust

TerraMaster D1 SSD Plus Review: Experience a Faster External SSD

TerraMaster D1 SSD Plus Review: Experience a Faster External SSD

Microsoft is investigating Windows 11 KB5063878 SSD data corruption/failure issue

Microsoft Surface Won’t Turn On: 6 Tested Solutions to Fix

CVE-2025-39372 – WordPress Events Calendar Registration & Tickets Cross-site Scripting

DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks

He Hacked McDonald’s for Free Nuggets — What He Found Was Far More Dangerous

Leaked PS6 Details Hint at $499 Price, 2027 Launch, and New Handheld

CVE-2023-50786 – Dradis HTTP Image Reference Vulnerability (Arbitrary Code Execution)

Turn Siloed Metrics into Business-Driven Insights with Tx-Insights

Unpatched XSS Vulnerability in Jenkins Gatling Plugin Puts Users at Risk (CVE-2025-5806)

CVE-2025-6406 – Campcodes Online Hospital Management System SQL Injection Vulnerability

Cybercrime Losses Jump 33% in 2024, FBI Report Shows

Build multi-agent systems with LangGraph and Amazon Bedrock

Wing FTP Server Max Severe Vulnerability Let Attackers Take Full Server Control

CVE-2025-39372 – WordPress Events Calendar Registration & Tickets Cross-site Scripting

Related Posts