irmau

Products

ProductCVEsExploitedLatest
IRM Newsroom3–Jun 13, 2025

Exploited and recent CVEs

  • CVE-2025-4586 Medium 6.4 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode 0.2%
  • CVE-2025-4584 Medium 6.4 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode 0.2%
  • CVE-2025-4585 Medium 6.4 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmflat' Shortcode 0.2%