WordPress Beds24 Online Booking Plugin <= 2.0.25 is vulnerable to Cross Site Scripting (XSS)

Software Beds24 Online Booking Type Plugin Vulnerable versions = 2.0.25 Fixed in 2.0.26 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51664 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5f7041941bf3 Credits Roby Firnando Yusuf Required...

WordPress EzyOnlineBookings Online Booking System Widget Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software EzyOnlineBookings Online Booking System Widget Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51628 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4ffc41ab74e0 Credits SOPROBRO...

WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by ghsinfosec in WordPress Plugin WP Hotel Booking versions = 2.2.9...

CVE-2024-10559

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

CVE-2024-10559

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

CVE-2024-10559 SourceCodester Airport Booking Management System Passport Number details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function details of the component Passport Number Handler. The manipulation leads to buffer overflow. The attack needs to be approached locally. The exploit...

CVE-2024-10559

SourceCodester Airport Booking Management System 1.0 contains a buffer overflow in the Details/Passport Number Handler component. The vulnerability is exploitable with local access; the attacker can manipulate passport/name inputs to overflow buffers. The issue has been publicly disclosed and may...

CVE-2024-10559 SourceCodester Airport Booking Management System details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

SourceCodester Airport Booking Management System 安全漏洞

SourceCodester Airport Booking Management System is a SourceCodester open source airport booking management system. A security vulnerability exists in SourceCodester Airport Booking Management System version 1.0. An attacker exploiting this vulnerability could cause a buffer overflow...

WordPress WP Hotel Booking Plugin <= 2.1.4 is vulnerable to Local File Inclusion

Software WP Hotel Booking Type Plugin Vulnerable versions = 2.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-51582 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 5c0a345b0a12 Credits ghsinfosec Required privilege Contributor...

CVE-2024-50425

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

CVE-2024-50425

CVE-2024-50425 : WP Booking System (WordPress plugin) has a Broken Access Control vulnerability that may expose sensitive information to unauthorized control spheres. Affected versions are up to 2.0.19.10; a fix is available in 2.0.19.11. Update the plugin to mitigate.

CVE-2024-50425 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

CVE-2024-50425 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

CVE-2024-51076

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ Booking Management System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

CVE-2024-50418

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Time Slot Booking Time Slot timeslot allows DOM-Based XSS.This issue affects Time Slot: from n/a through = 1.3.6...

PT-2024-34192 · Time Slot · Time Slot

Name of the Vulnerable Software and Affected Versions: Time Slot versions through 1.3.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the Time Slot Booking Time Slot...

PT-2024-34199 · Roland Murg · Wp Booking System

Name of the Vulnerable Software and Affected Versions: WP Booking System versions 2.0.19.10 and earlier Description: The issue affects the exposure of sensitive system information to an unauthorized control sphere in the Veribo, Roland Murg WP Booking System. Recommendations: For WP Booking Syste...

PT-2024-34518 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/odms/admin/booking-search.php" API endpoint, allowing remote attackers to execute arbitrary code via the...