irmau
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| IRM Newsroom | 3 | – | Jun 13, 2025 |
Exploited and recent CVEs
- CVE-2025-4586 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode 0.2%
- CVE-2025-4584 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode 0.2%
- CVE-2025-4585 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmflat' Shortcode 0.2%