7897 matches found
WordPress Booking Addon for WooCommerce Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)
Software Booking Addon for WooCommerce Type Plugin Vulnerable versions = 4.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1704b913b21c Credits Rafie Muhammad...
WordPress Plugin Booking Calendar Contact Form 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Booking Calendar Contact Form < 1.2.41 - Unauthenticated Reflected Cross-Site Scripting
Description Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodePeople Booking Calendar Contact Form plugin = 1.2.40 versions...
WordPress Webba Booking Plugin < 4.5.31 is vulnerable to Cross Site Scripting (XSS)
Software Webba Booking Type Plugin Vulnerable versions 4.5.31 Fixed in 4.5.31 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Webba Plugins PSID 1c913074f660 Credits Rafie Muhammad Patchstack Required...
Aures Booking & POS Terminal - Local Privilege Escalation
Document Title: =============== Aures Booking & POS Terminal - Local Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2323 CVE-ID: CVE-2023-3786 References: https://nvd.nist.gov/vuln/detail/CVE-2023-3786...
CVE-2023-37744
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-booking-request.php...
CVE-2023-37744
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-booking-request.php...
Cross site scripting
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-booking-request.php...
Maid Hiring Management System 跨站脚本漏洞
PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, USA. A security vulnerability exists in Maid Hiring Management System v1.0, which originates from the component /admin/search-booking-request.php containing a cross-site scripting XSS vulnerability...
CVE-2023-37744
Maid Hiring Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the /admin/search-booking-request.php component. The issue is documented across multiple sources and is not tied to any other version beyond v1.0 in the provided documents. The exact root cause details...
PT-2023-26089 · Unknown · Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: Maid Hiring Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the /admin/search-booking-request.php component. Cross-site scripting XSS is a type of...
CVE-2023-37744
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-booking-request.php...
CVE-2020-36757
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the adminaddorderitem function. This makes it possible for unauthenticated attackers to add an order item via a...
Cross site request forgery (csrf)
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the adminaddorderitem function. This makes it possible for unauthenticated attackers to add an order item via a...
CVE-2020-36757
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 1.10.1 due to missing or incorrect nonce validation on the admin_add_order_item() function. This allows unauthenticated attackers to add an order item via a forged request by tricking a site ad...
WordPress Plugin WP Hotel Booking 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
Hostel Management System Cross-Site Scripting Vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the search booking field, which can be exploited to execute arbitrary Web script...
CVE-2023-36939
Cross-Site Scripting XSS vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field...
CVE-2023-36936
Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...
