Lucene search
+L

329 matches found

Cvelist
Cvelist
added 2023/12/28 10:14 a.m.33 views

CVE-2023-50860 WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Booking for Appointments and Events Calendar – Amelia allows Stored XSS.This issue affects Booking for Appointments and Events Calendar – Amelia: from n/a through 1.0.85...

6.5CVSS6.6AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/28 10:14 a.m.50 views

CVE-2023-50860

CVE-2023-50860 is a Stored XSS in the Booking for Appointments and Events Calendar – Amelia plugin for WordPress, affecting Amelia Booking versions up to 1.0.85. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious input to be reflected and...

6.5CVSS6.7AI score0.00325EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.12 views

PT-2023-31693 · Unknown · Tms Booking For Appointments/Events Calendar – Amelia

Name of the Vulnerable Software and Affected Versions: TMS Booking for Appointments and Events Calendar – Amelia versions 1.0 through 1.0.85 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means...

6.5CVSS6AI score0.00325EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2023/12/22 12:00 a.m.20 views

WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

Software Amelia Type Plugin Vulnerable versions = 1.0.85 Fixed in 1.0.86 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50860 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 27837f5455f3 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

6.5CVSS6.5AI score0.00325EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/06/26 9:15 a.m.26 views

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

7.1CVSS6.3AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/26 9:15 a.m.8 views

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

6.1CVSS7.3AI score0.0041EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/26 9:15 a.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

5.8CVSS6AI score0.0041EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/26 8:32 a.m.16 views

CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

7.1CVSS5.9AI score0.0041EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/26 8:32 a.m.60 views

CVE-2023-29427

CVE-2023-29427 – Amelia WordPress plugin : Unauthenticated Reflected Cross-Site Scripting (XSS) in the TMS Booking for Appointments and Events Calendar. Affected versions: Amelia plugin

7.1CVSS6AI score0.0041EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/26 8:32 a.m.33 views

CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

7.1CVSS6.4AI score0.0041EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/26 12:00 a.m.10 views

PT-2023-22254 · WordPress · Tms Booking For Appointments/Events Calendar – Amelia

Name of the Vulnerable Software and Affected Versions: TMS Booking for Appointments and Events Calendar – Amelia plugin versions prior to 1.0.75 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scrip...

7.1CVSS6.3AI score0.0041EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/26 12:00 a.m.11 views

WordPress Plugin TMS Booking for Appointments and Events Calendar – Amelia 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.9AI score0.0041EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/10 6:15 a.m.11 views

CVE-2023-27918

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...

6.1CVSS6.5AI score0.00508EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/10 6:15 a.m.26 views

CVE-2023-27918

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...

6.1CVSS6.3AI score0.00508EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/05/10 12:00 a.m.13 views

CVE-2023-27918

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL...

6.2AI score0.00508EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/10 12:00 a.m.63 views

CVE-2023-27918

The CVE-2023-27918 entry concerns a cross-site scripting (XSS) vulnerability in the WordPress plugin “Appointment and Event Booking Calendar for WordPress - Amelia.” Affected version range is Amelia prior to 1.0.76. The underlying issue is a failure to sanitize/escape user-controlled input, enabl...

6.1CVSS6.2AI score0.00508EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/04/24 4:41 a.m.9 views

WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" vulnerable to cross-site scripting

Overview WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" provided by TMS contains a cross-site scripting vulnerability CWE-79. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated. The developer and JPCERT/...

6.1CVSS6AI score0.00508EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/04/24 12:00 a.m.10 views

WordPress plugin Appointment and Event Booking Calendar for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Appointment and Event...

6.1CVSS6AI score0.00508EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2023/04/06 12:00 a.m.19 views

WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Software Amelia Type Plugin Vulnerable versions = 1.0.75 Fixed in 1.0.76 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29427 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5784c15e5a5a Credits minhtuanact Required...

7.1CVSS5.9AI score0.0041EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/04/07 12:00 a.m.25 views

WordPress Amelia plugin management appointment authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin is vulnerable to an...

5.5CVSS2.4AI score0.008EPSS
SaveExploits2References1
Rows per page
Query Builder