Cross site scripting

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...

Online Flight Booking Management System Security Vulnerability

Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Flight Booking Management System v1.0, which is caused by a cross-site scripting XSS vulnerability in the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2024-2076

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. Th...

House Rental Management System Security Vulnerability

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A security vulnerability exists in House Rental Management System version 1.0, which stems from an unknown function in booking.php/owner.php/tenant.php that results in missing authentication...

Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting

Description The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the date parameters in all versions up to, and including, 1.0.98 due to insufficient input sanitization and output escaping. This makes it possible for...

Booking Calendar < 1.3.83 - CSRF appointment scheduling

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying. PoC...

Bykea: Broken Access Control (IDOR) in Booking Detail and Bids Could Leads to Sensitive Information Disclosure

The report identified a vulnerability in the Bykea application's booking detail and bids endpoints that could lead to the disclosure of sensitive information. The vulnerable endpoints allowed an attacker to access the booking details, bids information, and bids configuration of other users by...

CVE-2024-23517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/a through 3.5.10...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/a through 3.5.10...

CVE-2024-24717

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23...

CVE-2024-24717

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23...

CVE-2024-23517

CVE-2024-23517 describes a stored cross-site scripting (XSS) vulnerability in the WordPress plugin Scheduling Plugin – Online Booking for WordPress (calendar-booking) affecting versions up to 3.5.10 (n/a–3.5.10). The issue stems from improper neutralization of input during web page generation , a...

CVE-2024-24717

CVE-2024-24717 affects Beds24 Online Booking WordPress plugin versions

CVE-2024-24717 WordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23...

CVE-2024-24717 WordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23...

PT-2024-20513 · Unknown · Beds24 Online Booking

Name of the Vulnerable Software and Affected Versions: Beds24 Online Booking versions 2.0.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

WordPress Plugin Beds24 Online Booking Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...