The vulnerability of the hotel reservation plugin Solidres in the WordPress content management system allows attackers to execute cross-site scripting attacks.

The vulnerability of the hotel reservation plugin Solidres in the WordPress content management system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks using the currencyname parameter...

CVE-2023-1374

The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currencyname' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to...