CVE-2024-13012

CVE-2024-13012 affects code-projects Hostel Management System 1.0. The vulnerability arises from manipulation of the arguments in /admin/registration.php (fname, mname, lname), leading to cross-site scripting (XSS). Several connected sources confirm remote initiation without further details on ex...

Code-Projects Hostel Management System 代码注入漏洞

Code-Projects Hostel Management System is an open source hostel management system from Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management System version 1.0, which originates from a cross-site scripting vulnerability in the fname/mname/lname parameter of the...

PT-2024-17870 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A problematic issue has been found in the processing of the file /admin/registration.php. The manipulation of the arguments fname, mname, and lname leads to cross-site scripting...

CVE-2024-12790

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2024-12790

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2024-12790 code-projects Hostel Management Site room-details.php cross site scripting

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2024-12790

CVE-2024-12790 affects Code-Projects Hostel Management Site 1.0; the vulnerability is a cross-site scripting issue in unknown parts of room-details.php. Remote exploitation is possible, and public disclosures exist. No patch/version fix details are provided in the documents; a known mitigation is...

CVE-2024-12790 code-projects Hostel Management Site room-details.php cross site scripting

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

PT-2024-17741 · Unknown · Code-Projects Hotel Managment System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management Site version 1.0 Description: A problem was found in the code, affecting unknown parts of the file room-details.php, leading to cross site scripting. The attack can be initiated remotely. Recommendations: For...

Code-Projects Hostel Management Site 代码注入漏洞

Code-Projects Hostel Management Site is an open source hotel management website by Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management Site version 1.0, which stems from a cross-site scripting vulnerability in the room-details.php file...

WordPress Hostel plugin < 1.1.5.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Hostel versions 1.1.5.3...

WordPress Hostel Plugin < 1.1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Hostel Type Plugin Vulnerable versions 1.1.5.3 Fixed in 1.1.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3753 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8eec664963a4 Credits Bob Matyas Required...

CVE-2024-3753

The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3753

The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3753

The Hostel WordPress plugin prior to 1.1.5.3 is affected by a Reflected Cross‑Site Scripting vulnerability: a parameter rendered back in the page is not properly sanitized/escaped, enabling an attacker to leverage XSS against high‑privilege users such as admins. CVSS 3.1 base score 5.9 (AV:N/AC:L...

CVE-2024-3753 Hostel < 1.1.5.3 - Reflected XSS

The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2024-27631 · WordPress · Hostel Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Hostel WordPress plugin versions prior to 1.1.5.3 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This...

CVE-2024-4314

The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect nonce validation when managing rooms. This makes it possible for unauthenticated attackers to create and delete rooms via a forged request...

WordPress plugin Hostel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-4314 hostel <= 1.1.5.3 - Cross-Site Request Forgery

The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect nonce validation when managing rooms. This makes it possible for unauthenticated attackers to create and delete rooms via a forged request...