369 matches found
WordPress Easy Appointments plugin <=1.11.7 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found in WordPress Easy Appointments plugin versions =1.11.7. Solution Update the WordPress Easy Appointments plugin to the latest available version at least 1.12.0...
Design/Logic Flaw
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
CVE-2017-15812 concerns the WordPress plugin Easy Appointments (before 1.12.0). The vulnerability is a cross-site scripting (XSS) flaw in the admin panel’s Settings values, allowing injection via the settings UI. The issue is evidenced across multiple sources in the connected documents, which con...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812: Improper Neutralization of Input During Web Page Generation
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
PT-2017-14242 · WordPress · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy Appointments plugin versions prior to 1.12.0 Description: The issue concerns a cross-site scripting XSS flaw. This flaw is located in the Settings values within the admin panel. Recommendations: For versions prior to 1.12.0, update to...