CVE-2025-22719: falha de alta gravidade em e4jvikwp VikAppointments Services Booking…
WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through <= 1.2.16.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
e4jvikwp · VikAppointments Services Booking CalendarCVEs relacionadas — e4jvikwp VikAppointments Services Booking…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-87115CRITICALVikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' ParameterEPSS 0.9%CVE-2026-15918HIGHVikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL InjectionEPSS 0.5%CVE-2026-84768CRITICALWordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerabilityEPSS 0.4%