Irmau
Monthly
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmcalendarview' shortcode. The vulnerability affects all versions up to and including 1.2.17, and no public exploit or active exploitation has been identified at this time.
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmflat' shortcode. The vulnerability affects all versions up to and including 1.2.17, and no public exploit or active exploitation has been identified at this time.
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmeventlist' shortcode. The vulnerability affects all versions up to and including 1.2.17 and is due to insufficient input sanitization and output escaping. No public exploit or active exploitation has been identified at this time.
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmcalendarview' shortcode. The vulnerability affects all versions up to and including 1.2.17, and no public exploit or active exploitation has been identified at this time.
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmflat' shortcode. The vulnerability affects all versions up to and including 1.2.17, and no public exploit or active exploitation has been identified at this time.
Stored cross-site scripting in IRM Newsroom plugin for WordPress allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'irmeventlist' shortcode. The vulnerability affects all versions up to and including 1.2.17 and is due to insufficient input sanitization and output escaping. No public exploit or active exploitation has been identified at this time.