CVE-2024-0856 Booking Calendar < 1.3.83 - CSRF appointment scheduling

The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying...

CVE-2024-0856

The Appointment Booking Calendar WordPress plugin versions prior to 1.3.83 are vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The root cause is the absence of CSRF checks in specific areas, which may allow an attacker to trick a logged-in user into performing unauthorized actions, such a...

CVE-2024-0856: Cross-Site Request Forgery (CSRF)

The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying...

PT-2024-15869 · WordPress · Appointment Booking Calendar

Name of the Vulnerable Software and Affected Versions: Appointment Booking Calendar WordPress plugin versions prior to 1.3.83 Description: The issue concerns a lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unwanted actions, such as...

CVE-2023-51525

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2023-51525

A vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.8.4...

CVE-2023-51525

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2023-51525

CVE-2023-51525 concerns the WordPress plugin WP Simple Booking Calendar (Veribo/Roland Murg). A CSRF vulnerability affects versions up to 2.0.8.4 (likely fixed in later releases). Root cause: improper CSRF protection enabling unauthorized actions on behalf of an authenticated user. Impact: potent...

CVE-2023-51525 WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2023-51525 WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2024-25916

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joseph C Dolson My Calendar allows Stored XSS.This issue affects My Calendar: from n/a through 3.4.23...

CVE-2024-25916 WordPress My Calendar plugin <= 3.4.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joseph C Dolson My Calendar allows Stored XSS.This issue affects My Calendar: from n/a through 3.4.23...

CVE-2024-25916

CVE-2024-25916 affects the WordPress My Calendar plugin up to version 3.4.23. The root cause is improper neutralization of input during page generation, resulting in Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes. The vulnerabili...

CVE-2024-25916 WordPress My Calendar plugin <= 3.4.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joseph C Dolson My Calendar allows Stored XSS.This issue affects My Calendar: from n/a through 3.4.23...

OSV-2024-171 Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67357 Crash type: Security exception Crash state: org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse java.base/sun.util.calendar.ZoneInfo.getLastRawOffset java.base/sun.util.calendar.ZoneInfo.getOffse...

WordPress Plugin My Calendar Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress plugin WP Simple Booking Calendar Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2023-51525: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2024-25916: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joseph C Dolson My Calendar allows Stored XSS.This issue affects My Calendar: from n/a through 3.4.23...

PT-2024-21208 · Unknown · My Calendar

Name of the Vulnerable Software and Affected Versions: My Calendar versions through 3.4.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts...