130 matches found
CVE-2013-7477
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
CVE-2013-7477
The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...
PT-2019-7026 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5.2 Description: The issue concerns a cross-site scripting XSS flaw in the booking form of the events-manager plugin. This type of flaw allows attackers to inject malicious scripts into the website,...
Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS
Lack of authorisation check in the cpabcappointmentssaveedition function can lead to stored XSS via the editionarea parameter when cfwppedit is set to 'js' or 'css' /wp-admin/admin-ajax.php" method="POST" "/ /wp-admin/admin-ajax.php" method="POST" "/ The payload will be triggered in all pages wit...
yha.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-633885 Description| Value ---|--- Affected Website:| yha.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
valentiaskelligs.com XSS vulnerability
Open Bug Bounty ID: OBB-608952 Description| Value ---|--- Affected Website:| valentiaskelligs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
hotelolimpia.net XSS vulnerability
Vulnerable URL: http://www.hotelolimpia.net/booking.html?bform%5Bcheckin%5D=%22%3E%3C/iframe%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%5Bcheckout%5D=18-08-2017%5BnumRooms%5D=1%5BreqRooms%5D%5B1%5D%5Badults%5D=2%5BreqRooms%5D%5B1%5D%5Bchild%5D=0 Details: Description| Value ---|---...
suu.edu XSS vulnerability
Vulnerable URL: https://www.suu.edu/mc/experts/book-expert.php?expert=1"...
WordPress Booking Calendar Contact Form 1.0.23 Blind SQL Injection
Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...