Lucene search
+L

7852 matches found

Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.9 views

PT-2025-14635 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue affects the processing of the file /patient/profile.php?patientId=1, where the manipulation of the patientFirstName argument leads to SQL...

9.8CVSS7.6AI score0.00603EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.8 views

PT-2025-14633 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been found in the projectworlds Online Doctor Appointment Booking System, affecting some unknown functionality of the file...

9.8CVSS7.6AI score0.00603EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.7 views

WordPress plugin TuriTop Booking System 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

6.5CVSS7.1AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.12 views

PT-2025-14624 · Unknown · Project Worlds Online Lawyer Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A critical issue has been found in the processing of the file /lawyer booking.php, where the manipulation of the unblock id argument leads to sql injection. This issue ca...

9.8CVSS7.3AI score0.00508EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.11 views

Project Worlds Online Doctor Appointment Booking System 注入漏洞

Project Worlds Online Doctor Appointment Booking System is an online doctor appointment booking system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Doctor Appointment Booking System version 1.0, which stems from an incorrect manipulation of a parameter ID...

9.8CVSS7.9AI score0.00603EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/01 9:15 p.m.7 views

CVE-2025-31560

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system allows Privilege Escalation. This issue affects Salon booking system: from n/a through 10.11...

7.2CVSS7.3AI score0.0055EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/01 9:15 p.m.7 views

CVE-2025-30892

Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through = 1.8.7...

8.8CVSS7.2AI score0.00654EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/04/01 8:58 p.m.36 views

CVE-2025-31560 WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 10.15...

7.2CVSS0.0055EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 8:58 p.m.11 views

CVE-2025-31560 WordPress Salon booking system plugin <= 10.11 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system allows Privilege Escalation. This issue affects Salon booking system: from n/a through 10.11...

7.2CVSS7.2AI score0.0055EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/01 4:04 p.m.12 views

WordPress Beds24 Online Booking plugin <= 2.0.27 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Beds24 Online Booking versions = 2.0.27...

6.5CVSS6.9AI score0.00354EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.35 views

CVE-2025-31851

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through = 2.0.27...

6.5CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:52 p.m.62 views

CVE-2025-31851

CVE-2025-31851 is an authenticated Stored XSS in Beds24 Online Booking (WordPress plugin), affecting Beds24 Online Booking up to version 2.0.27 (per Wordfence notes) and patched in a later release. The issue stems from improper input neutralization during web page generation, enabling stored XSS....

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.21 views

CVE-2025-31803 WordPress Turisbook Booking System plugin <= 1.3.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neteuro Turisbook Booking System turisbook-booking-system allows Stored XSS.This issue affects Turisbook Booking System: from n/a through = 1.3.8...

6.5CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.5 views

CVE-2025-31803 WordPress Turisbook Booking System plugin <= 1.3.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neteuro Turisbook Booking System allows Stored XSS. This issue affects Turisbook Booking System: from n/a through 1.3.7...

6.5CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.46 views

CVE-2025-31803

CVE-2025-31803 is a Stored Cross‑Site Scripting (XSS) in Turisbook Booking System (Turisbook Booking System) up to version 1.3.7. Root cause cited: improper neutralization of input during web page generation. CVSSv3.1 base score 6.5 (MEDIUM) with network attack vector, low attack complexity, low ...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/01 11:36 a.m.16 views

WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Awesome Event Booking versions = 2.8.4...

7.1CVSS6.9AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/04/01 10:42 a.m.14 views

WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Revan Arifio in WordPress Plugin Salon booking system versions 10.15...

7.2CVSS8.3AI score0.0055EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.11 views

WordPress plugin Beds24 Online Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

6.5CVSS6.5AI score0.00354EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.5 views

WordPress plugin Turisbook Booking System 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS6.5AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.15 views

PT-2025-14426 · Unknown · Dimitri Grassi Salon Booking System

Name of the Vulnerable Software and Affected Versions: Dimitri Grassi Salon booking system versions from n/a through 10.11 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in the Dimitri Grassi Salon booking system...

7.2CVSS9.4AI score0.0055EPSS
SaveExploits0References6
Rows per page
Query Builder