NSquared records
5 published records for vendor nsquared.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-2342No exploit | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcodensquared · simply schedule appointments · CWE-89 | High8.8 | — | 0.6% | Apr 9, 2024 |
26Monitor | CVE-2024-2341No exploit | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injectionnsquared · simply schedule appointments · CWE-89 | Medium6.5 | — | 0.6% | Apr 9, 2024 |
24Monitor | CVE-2024-13431No exploit | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scriptingnsquared · appointment booking calendar · CWE-79 | Medium6.1 | — | 0.4% | Mar 7, 2025 |
21Monitor | CVE-2024-4288No exploit | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingnsquared · simply schedule appointments · CWE-79 | Medium5.4 | — | 0.3% | May 16, 2024 |
18Monitor | CVE-2024-1760No exploit | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Resetnsquared · simply schedule appointments · CWE-352 | Medium4.7 | — | 0.3% | Mar 6, 2024 |
- CVE-2024-234235Monitor
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
HighCVSS 8.8No exploitEPSS 1%nsquared · simply schedule appointmentsApr 9, 2024
- CVE-2024-234126Monitor
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
MediumCVSS 6.5No exploitEPSS 1%nsquared · simply schedule appointmentsApr 9, 2024
- CVE-2024-1343124Monitor
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%nsquared · appointment booking calendarMar 7, 2025
- CVE-2024-428821Monitor
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%nsquared · simply schedule appointmentsMay 16, 2024
- CVE-2024-176018Monitor
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset
MediumCVSS 4.7No exploitEPSS 0%nsquared · simply schedule appointmentsMar 6, 2024