PT-2024-30445

Name of the Vulnerable Software and Affected Versions: Salon booking system versions through 10.8.1 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in the Salon Booking System. This vulnerability allows redirection to...

WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Salon booking system versions = 10.8.1...

WordPress Salon booking system Plugin <= 10.8.1 is vulnerable to Open Redirection

Software Salon booking system Type Plugin Vulnerable versions = 10.8.1 Fixed in 10.9 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-43280 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 26e2d99b4eb9 Credits Le Ngoc Anh Required privilege...

WordPress Pinpoint Booking System plugin < 2.9.9.4.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Pinpoint Booking System versions 2.9.9.4.8...

CVE-2024-3636

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3636

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3636

The CVE-2024-3636 entry concerns the Pinpoint Booking System WordPress plugin. Affected versions are prior to 2.9.9.4.8. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of certain plugin settings, which could allow high-privilege users (e...

CVE-2024-3636 Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3636 Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress plugin Pinpoint Booking System 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability previously...

PT-2024-26960 · WordPress · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: The Pinpoint Booking System WordPress plugin versions prior to 2.9.9.4.8 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capabili...

WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by justakazh Patchstack Alliance in WordPress Plugin Salon booking system versions = 10.7...

WordPress Salon booking system Plugin <= 10.7 is vulnerable to SQL Injection

Software Salon booking system Type Plugin Vulnerable versions = 10.7 Fixed in 10.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-39658 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 4a5a4b833999 Credits justakazh Required privilege Administrator...

Cinema Booking System 1.0 SQL Injection / Cross Site Request Forgery Vulnerability

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title Cinema Booking System - Multiple Vulnerabilities .:. Google Dorks .:. intitle:Cinema Booking System .:. Date: July 5, 2024 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor -...

Cinema Booking System 1.0 SQL Injection / Cross Site Request Forgery

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title Cinema Booking System - Multiple Vulnerabilities .:. Google Dorks .:. intitle:Cinema Booking System .:. Date: July 5, 2024 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor -...

CVE-2024-37231

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

CVE-2024-37231

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

WordPress plugin Salon booking system path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...