CVE-2025-46528 – Steve Availability Calendar CSRF Stored XSS

April 24, 2025

CVE ID : CVE-2025-46528

Published : April 24, 2025, 4:15 p.m. | 2 hours, 44 minutes ago

Description : Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar allows Stored XSS. This issue affects Availability Calendar: from n/a through 0.2.4.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46530 – HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS

Next Article CVE-2025-46534 – DanielRiera Image Style Hover DOM-Based Cross-site Scripting Vulnerability

Designing Better UX For Left-Handed People

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

I ran with the Apple Watch and Samsung Watch 8 – here’s the better AI coach

8 smart home gadgets that instantly upgraded my house (and why they work)

I tested Panasonic’s new affordable LED TV model – here’s my brutally honest buying advice

OpenAI teases imminent GPT-5 launch. Here’s what to expect

NativePHP Is Entering Its Next Phase

NativePHP Is Entering Its Next Phase

Medical Card Generator Android App Project Using SQLite

The details of TC39’s last meeting

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

The next time you look at Microsoft Copilot, it may look back — but who asked for this?

5 Open Source Apps You Can use for Seamless File Transfer Between Linux and Android

CVE-2025-46528 – Steve Availability Calendar CSRF Stored XSS

SharePoint under fire: ToolShell attacks hit organizations worldwide

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

Ofcom investigates 4chan for not protecting users from illegal content

How I use Android’s hidden custom modes when I need to focus

The Razer Blade 14 is amazing — but should “normal” people actually buy this ultra-premium gaming laptop?

Satya Nadella says company layoffs have been “weighing heavily” on him, which arrived despite the “objective measure” that “Microsoft is thriving” — and more layoffs could be on the way

CVE-2025-47283 – Gardener gardenlet Administrative Privilege Escalation Vulnerability

OpenAI Launches o3 Pro But What’s New About It?

Samsung dropped the 4TB T9 portable SSD to over 40% off ahead of Prime Day

CVE-2025-46528 – Steve Availability Calendar CSRF Stored XSS

Related Posts