CVE-2022-29443 WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Nicdark's Hotel Booking plugin = 3.0 at WordPress...

CVE-2022-29443

CVE-2022-29443 affects Nicdark’s WordPress Hotel Booking plugin

WordPress plugin Hotel Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Hotel Booking plugin 3.0 and earlier versions contain a cross-site scripting vulnerability. An...

WordPress Appointment Hour Booking plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of WordPress prior to Appointment Hour Booking plugi...

CVE-2022-1710

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1710

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1710

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1710 Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1710

The CVE-2022-1710 entry concerns the WordPress Appointment Hour Booking plugin prior to version 1.3.56. The vulnerability arises from insufficient sanitization/escaping of the Calendar fields settings, enabling stored Cross-Site Scripting (XSS) by high-privilege users. Affected component: the plu...

WordPress plugin Appointment Hour Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of WordPress prior to Appointment Hour Booking plugi...

WordPress Motopress Hotel Booking Lite 4.2.4 Cross Site Scripting

Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting XSS Date: 2022-06-05 Exploit Author: Sanjay Singh Vendor Homepage: https://motopress.com/ Software Link: https://downloads.wordpress.org/plugin/motopress-hotel-booking-lite.4.2.4.zip Version: 4.2.4...

WordPress Motopress Hotel Booking Lite 4.2.4 Plugin - Stored Cross-Site Scripting Vulnerability

Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting XSS Exploit Author: Sanjay Singh Vendor Homepage: https://motopress.com/ Software Link: https://downloads.wordpress.org/plugin/motopress-hotel-booking-lite.4.2.4.zip Version: 4.2.4 Tested on:...

WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting XSS Date: 2022-06-05 Exploit Author: Sanjay Singh Vendor Homepage: https://motopress.com/ Software Link: https://downloads.wordpress.org/plugin/motopress-hotel-booking-lite.4.2.4.zip Version: 4.2.4...

Simple Bus Ticket Booking System SQL Injection Vulnerability

Simple Bus Ticket Booking System is a bus ticket booking system. version 1.0 of Simple Bus Ticket Booking System is vulnerable to SQL injection attack via /SimpleBusTicket/index.php...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53349）

Online Car Wash Booking System is an online car wash booking system by Carlo Montero, a personal developer. Online Car Wash Booking System v1.0 is vulnerable to SQL injection, which originates from /ocwbs/admin/vehicles/ managevehicle.php?id=The page lacks validation for external input SQL...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53351）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =deleteservice page lacks validation of external input SQL...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53352）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =deletevehicle page lacks validation for external input SQL...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53346）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=user/ manageuser&id=page lacks validation of external input SQL statements,...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53354）

Online Car Wash Booking System is an online car wash booking system by Carlo Montero, a personal developer. online Car Wash Booking System v1.0 is vulnerable to SQL injection, which originates from /ocwbs/admin/bookings/ updatestatus.php?id=The page lacks validation for external input SQL...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53353）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =getvehicleservice page lacks validation of external input...