Lucene search
+L

7877 matches found

CNNVD
CNNVD
added 2023/11/20 12:00 a.m.10 views

WordPress Plugin WP Hotel Booking Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS6.8AI score0.0052EPSS
SaveExploits2References2
Packet Storm
Packet Storm
added 2023/11/20 12:00 a.m.443 views

Shuttle Booking Software 2.0 Cross Site Scripting

Exploit Title: Shuttle Booking Software v2.0 - Multiple Stored Cross-Site Scripting Authenticated Date: 09/11/2023 Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/shuttle-booking-software/ Software Link:...

7.5AI score0.00721EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2023/11/20 12:00 a.m.417 views

PHPJabbers Availability Booking Calendar 5.0 CSV Injection

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - CSV Injection Date: 12/11/2023 Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0...

7.5AI score0.01166EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2023/11/20 12:00 a.m.494 views

PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting

Exploit Title: Multiple Cross Site Scripting in PHPJabbers Availability Booking Calendar v5.0 Date: 12/11/2023 Exploit Author: BugsBD Security Researcher Orpon Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version:...

7.5AI score0.00499EPSS
SaveExploits2
zdt
zdt
added 2023/11/20 12:00 a.m.516 views

PHPJabbers Availability Booking Calendar 5.0 CSV Injection Vulnerability

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - CSV Injection Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0 Tested on: Windows...

8.8CVSS7.5AI score0.01166EPSS
SaveExploits3
CNNVD
CNNVD
added 2023/11/20 12:00 a.m.11 views

WordPress Plugin WP Hotel Booking Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS7.4AI score0.63711EPSS
SaveExploits2References2
zdt
zdt
added 2023/11/20 12:00 a.m.550 views

PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting Vulnerability

Exploit Title: Multiple Cross Site Scripting in PHPJabbers Availability Booking Calendar v5.0 Exploit Author: BugsBD Security Researcher Orpon Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0 Tested on:...

6.1CVSS7.5AI score0.00499EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2023/11/20 12:00 a.m.11 views

PT-2023-32237 · WordPress · Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: WP Hotel Booking WordPress plugin versions prior to 2.0.8 Description: The issue concerns a lack of authorization and CSRF checks in the WP Hotel Booking WordPress plugin, which also fails to verify that the item to be deleted is indeed a...

5.4CVSS7.1AI score0.00271EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2023/11/20 12:00 a.m.12 views

PT-2023-32238

Name of the Vulnerable Software and Affected Versions WP Hotel Booking WordPress plugin versions prior to 2.0.8 Description The issue concerns a lack of authorization and CSRF checks, as well as improper handling of user input in SQL statements. This allows unauthenticated users to perform SQL...

9.8CVSS7.3AI score0.63711EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/11/20 12:00 a.m.8 views

Shuttle Booking Software Cross-Site Scripting Vulnerability

Shuttle Booking Software is a PHP Jabbers open source shuttle booking software. A cross-site scripting vulnerability exists in version 2.0 of Shuttle Booking Software. A remote attacker can use this vulnerability to execute arbitrary code via the name, description, title and address parameters in...

5.4CVSS7AI score0.00721EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2023/11/20 12:00 a.m.13 views

PT-2023-32336 · WordPress · Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: WP Hotel Booking WordPress plugin versions prior to 2.0.8 Description: The issue concerns a lack of proper authorization in the deletion of packages. This allows users with Contributor and above roles to delete posts that do not belong to the...

5.4CVSS5.3AI score0.0052EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2023/11/20 12:00 a.m.11 views

WordPress Plugin WP Hotel Booking Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP Hotel Booking version...

5.4CVSS6.8AI score0.00271EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2023/11/13 12:00 a.m.17 views

WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Bus Ticket Booking with Seat Reservation Type Plugin Vulnerable versions = 5.2.5 Fixed in 5.2.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30496 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID cc34a3da3177...

7.1CVSS5.7AI score0.00404EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/12 10:15 p.m.10 views

CVE-2023-28498

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

8.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/12 10:15 p.m.28 views

CVE-2023-28498

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

8.8CVSS0.00312EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/12 10:15 p.m.27 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

6.8CVSS7.5AI score0.00312EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/12 9:57 p.m.61 views

CVE-2023-28498

CVE-2023-28498 is a Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin for WordPress, affecting versions

8.8CVSS6.5AI score0.00312EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/12 9:57 p.m.17 views

CVE-2023-28498 WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

4.3CVSS7.1AI score0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/12 9:57 p.m.33 views

CVE-2023-28498 WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

4.3CVSS9AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/12 12:00 a.m.13 views

WordPress Plugin Hotel Booking Lite Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS6.5AI score0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder