WordPress Easy Appointments Plugin < 1.12.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:easyappointmentsproject:easyappointments"; if description...

WordPress Easy Appointments plugin <=1.11.7 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Easy Appointments plugin versions =1.11.7. Solution Update the WordPress Easy Appointments plugin to the latest available version at least 1.12.0...

Design/Logic Flaw

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...

CVE-2017-15812

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...

CVE-2017-15812

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...

CVE-2017-15812

CVE-2017-15812 concerns the WordPress plugin Easy Appointments (before 1.12.0). The vulnerability is a cross-site scripting (XSS) flaw in the admin panel’s Settings values, allowing injection via the settings UI. The issue is evidenced across multiple sources in the connected documents, which con...

CVE-2017-15812

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...

CVE-2017-15812: Improper Neutralization of Input During Web Page Generation

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...

PT-2017-14242 · WordPress · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy Appointments plugin versions prior to 1.12.0 Description: The issue concerns a cross-site scripting XSS flaw. This flaw is located in the Settings values within the admin panel. Recommendations: For versions prior to 1.12.0, update to...

Easy Appointments <= 1.11.7 - Cross-Site Scripting (XSS)

The Easy Appointments WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Appointments plugin <=2.2.1 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability found by Matt Barry WordFence in WordPress Appointments plugin versions =2.2.1. Solution Update the WordPress Appointments plugin to the latest available version at least 2.2.2...

VulnCheck KEV: CVE-2017-20206

The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the wpmudevappointments cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...

appointmentsorganizer.com XSS vulnerability

Vulnerable URL: https://www.appointmentsorganizer.com/slogin/login.php?appointid=15name=1"...

appointments.seizethedaymassage.com XSS vulnerability

Vulnerable URL: http://appointments.seizethedaymassage.com/department.asp?dept=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Vik Appointments 1.4 and previous

Vik Appointments 1.4 and previous, SQL Injection Resolution: update to 1.5 Update notice: https://extensionsforjoomla.com/blog/12-updates/46-security-notices-sql-injection-reports...

Open-Xchange: Critical : View/Edit access to private appointments of calendar folder by read only user (Vertical privilege escalation)

Hi Team, Description : Read only user of calendar folder shouldn't be able access any private appointments. I have found a move calendar folder request which is working for read only user. Once Attacker moves the appointment to his folder , then he can Access private appointments. Vulnerable HTTP...

Joomla Vik Appointments Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'itemopt' parameter of the Joomla Vik Appointments component, which can be exploited by attackers to access or modify database data...

Joomla! Component Vik Appointments 1.5 - SQL Injection

Joomla! Component Vik Appointments 1.5 - SQL Injection Exploit Title: Joomla! Component Vik Appointments v1.5 - SQL Injection Google Dork: inurl:index.php?option=comvikappointments Date: 15.03.2017 Vendor Homepage: https://extensionsforjoomla.com/ Software :...

Joomla! Component Vik Appointments 1.5 - SQL Injection

Exploit Title: Joomla! Component Vik Appointments v1.5 - SQL Injection Google Dork: inurl:index.php?option=comvikappointments Date: 15.03.2017 Vendor Homepage: https://extensionsforjoomla.com/ Software : https://extensionsforjoomla.com/livedemo/vikappointments/ Demo:...

Joomla Vik Appointments 1.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Vik Appointments v1.5 - SQL Injection Google Dork: inurl:index.php?option=comvikappointments Date: 15.03.2017 Vendor Homepage: https://extensionsforjoomla.com/ Software :...