7854 matches found
WordPress Taxi Booking Manager for WooCommerce Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
Software Taxi Booking Manager for WooCommerce Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43986 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cd7a0b805b0e Credits Sharanabasappa...
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.3.5...
WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.3.5 is vulnerable to Cross Site Scripting (XSS)
Software Bus Ticket Booking with Seat Reservation Type Plugin Vulnerable versions = 5.3.5 Fixed in 5.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43985 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 34dc0c71fc7e Credits Sharanabasapp...
CVE-2024-7647
The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasyncwidgetsettingsfnc function. This makes it possible for unauthenticated attackers to...
CVE-2024-7647
The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasyncwidgetsettingsfnc function. This makes it possible for unauthenticated attackers to...
CVE-2024-7647
The OTA Sync Booking Engine Widget for WordPress is affected by a CSRF vulnerability (CVE-2024-7647) in versions up to 1.2.7, caused by missing or incorrect nonce validation in the otasync_widget_settings_fnc() function. This can allow unauthenticated attackers to update the plugin’s settings and...
CVE-2024-7647 OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasyncwidgetsettingsfnc function. This makes it possible for unauthenticated attackers to...
CVE-2024-7647 OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The OTA Sync Booking Engine Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.7. This is due to missing or incorrect nonce validation on the otasyncwidgetsettingsfnc function. This makes it possible for unauthenticated attackers to...
WordPress OTA Sync Booking Engine Widget plugin <= 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Ala Arfaoui in WordPress Plugin OTA Sync Booking Engine Widget versions = 1.2.7...
WordPress plugin OTA Sync Booking Engine Widget 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress OTA Sync Booking Engine Widget Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software OTA Sync Booking Engine Widget Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7647 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID d35ee6f2779f Credits Ala...
CVE-2024-43280
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1...
CVE-2024-43280
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1...
CVE-2024-43280
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1...
CVE-2024-43280 WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1...
CVE-2024-43280 WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1...
CVE-2024-43280
CVE-2024-43280 is an Open Redirect vulnerability in the Salon Booking System WordPress plugin (affected: Salon Booking System
WordPress plugin Salon booking system 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
PT-2024-30445
Name of the Vulnerable Software and Affected Versions: Salon booking system versions through 10.8.1 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in the Salon Booking System. This vulnerability allows redirection to...
WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Salon booking system versions = 10.8.1...