9971 matches found
CVE-2013-7480: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas...
CVE-2016-10916: Improper Neutralization of Special Elements used in an SQL Command
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
PT-2019-7712
Name of the Vulnerable Software and Affected Versions appointment-booking-calendar plugin versions prior to 1.1.24 Description The issue is related to SQL injection. Recommendations For versions prior to 1.1.24, update to version 1.1.24 or later to resolve the issue...
CVE-2016-10908
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
CVE-2016-10909
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2016-10908
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
Sql injection
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...
Cross site scripting
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2017-18555
The CVE-2017-18555 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Booking-SMS plugin. Multiple sources (Red Hat, CNVD, NVD, CVE lists) confirm that the vulnerability affects the Booking-SMS plugin before version 1.1.0 and can be triggered in user-controlled input...
CVE-2016-10909
The CVE-2016-10909 entry concerns the WordPress Booking Calendar Contact Form plugin prior to 1.0.24, which is vulnerable to SQL Injection due to an input handling flaw in that plugin version. The issue is documented consistently across multiple sources (NVD, Red Hat, CVE registries, CNVD, PRION,...
CVE-2016-10908
CVE-2016-10908 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin booking-calendar-contact-form when using versions before 1.0.24. The issue is a vulnerability in the plugin's handling of input/output that could allow an attacker to inject client-side code. The affected ...
PT-2019-7704
Name of the Vulnerable Software and Affected Versions booking-calendar-contact-form plugin versions prior to 1.0.24 Description The issue affects the booking-calendar-contact-form plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 1.0.24,...
PT-2019-8489
Name of the Vulnerable Software and Affected Versions booking-sms plugin for WordPress versions prior to 1.1.0 Description The issue affects the booking-sms plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 1.1.0, update to version 1.1.0 or...
CVE-2016-10908: Improper Neutralization of Input During Web Page Generation
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
PT-2019-7705
Name of the Vulnerable Software and Affected Versions booking-calendar-contact-form plugin versions prior to 1.0.24 Description The issue is related to SQL injection. Recommendations For versions prior to 1.0.24, update to version 1.0.24 or later to resolve the issue...