Lucene search
+L

7877 matches found

CNNVD
CNNVD
added 2023/10/16 12:00 a.m.9 views

WordPress Plugin Timely Booking Button Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS5.9AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.12 views

PT-2023-29333 · WordPress · Timely Booking Button

Name of the Vulnerable Software and Affected Versions: Timely Booking Button plugin versions = 2.0.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into the system, whi...

5.9CVSS5.3AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/10/16 12:00 a.m.9 views

WordPress plugin WordPress Online Booking and Scheduling Plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.2CVSS7.8AI score0.00717EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/10/16 12:00 a.m.12 views

WordPress plugin Booking Calendar Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.1CVSS6.1AI score0.00475EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.13 views

PT-2023-29899 · WordPress · Booking Calendar

Name of the Vulnerable Software and Affected Versions: Booking Calendar WordPress plugin versions prior to 9.7.3.1 Description: The issue allows unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators due to the plugin's failure to sanitize and escape some of i...

6.1CVSS6.2AI score0.00475EPSS
SaveExploits2References6
OSV
OSV
added 2023/10/13 4:15 p.m.8 views

CVE-2023-45270

Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/13 4:15 p.m.23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/13 3:13 p.m.62 views

CVE-2023-45270

CVE-2023-45270 is a CSRF vulnerability in the WordPress Pinpoint Booking System plugin, affected versions

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/13 3:13 p.m.49 views

CVE-2023-45270 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/13 3:13 p.m.16 views

CVE-2023-45270 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...

4.3CVSS8.8AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/13 12:00 a.m.10 views

PT-2023-29476 · WordPress · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System plugin versions = 2.9.9.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

8.8CVSS8.6AI score0.00214EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/13 12:00 a.m.9 views

Wordpress Plugin Pinpoint Booking System - #1 WordPress Booking Plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Wordpress Plugin Pinpoint Booking System - ...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/12 4:15 p.m.32 views

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

8.8CVSS8.8AI score0.00486EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/12 4:15 p.m.10 views

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

8.8CVSS7.2AI score0.00487EPSS
SaveExploits2References3
OSV
OSV
added 2023/10/12 4:15 p.m.12 views

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

8.8CVSS5.8AI score0.00486EPSS
SaveExploits1References1
Prion
Prion
added 2023/10/12 4:15 p.m.28 views

Cross site request forgery (csrf)

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

6.8CVSS8.8AI score0.00486EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/12 12:00 a.m.18 views

PT-2023-28717 · Phpjabbers · Phpjabbers Limo Booking

Name of the Vulnerable Software and Affected Versions: PHPJabbers Limo Booking Software version 1.0 Description: The issue allows for Cross Site Request Forgery CSRF to add an admin user via the Add Users Function. This can be achieved through the...

8.8CVSS8.8AI score0.00486EPSS
SaveExploits1References4
CVE
CVE
added 2023/10/12 12:00 a.m.53 views

CVE-2023-43147

CVE-2023-43147 affects PHPJabbers Limo Booking Software 1.0. It describes a Cross-Site Request Forgery (CSRF) vulnerability that allows adding an admin user through the Add Users Function via the URI index.php?controller=pjAdminUsers&action=pjActionCreate. Impact is a high-severity admin account ...

8.8CVSS8.7AI score0.00486EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 12:00 a.m.16 views

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

7AI score0.00486EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.14 views

Limo Booking Software Cross-Site Request Forgery Vulnerability

PHPJabbers Limo Booking Software is a limo booking software from PHPJabbers. A security vulnerability exists in PHPJabbers Limo Booking Software version 1.0, which stems from the presence of a cross-site request forgery CSRF vulnerability...

8.8CVSS6.8AI score0.00486EPSS
SaveExploits1References2
Rows per page
Query Builder