3511 matches found
WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Vinit Lakra in WordPress Plugin eZee Online Hotel Booking Engine versions = 1.0.0...
CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...
CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...
CVE-2025-57938
CVE-2025-57938 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Easy Hotel Booking (themename: Easy Hotel Booking) that is exploitable via improper input handling during web page generation. Affected version range is shown as “n/a through 1.6.9”; the CVSS vector (3...
CVE-2025-57938
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...
CVE-2025-58661
Technical details not publicly provided in the supplied documents for CVE-2025-58661 (eZee Online Hotel Booking Engine). Update with affected versions, impact, and remediation when available.
CVE-2025-58661 WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eZee Technosys eZee Online Hotel Booking Engine online-booking-engine allows Stored XSS.This issue affects eZee Online Hotel Booking Engine: from n/a through = 1.0.0...
CVE-2025-10788
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10788
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10789
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...
CVE-2025-10789
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...
CVE-2025-10789 SourceCodester Online Hotel Reservation System deleteslide.php sql injection
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...
CVE-2025-10789 SourceCodester Online Hotel Reservation System deleteslide.php sql injection
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...
CVE-2025-10789
CVE-2025-10789 affects SourceCodester Online Hotel Reservation System 1.0, specifically the deleteslide.php file. The issue arises from manipulating the ID parameter, which leads to a SQL injection vulnerability. Remote exploitation is possible, and publicly available exploits exist. Multiple con...
CVE-2025-10788 SourceCodester Online Hotel Reservation System deleteroominventory.php sql injection
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10788
SourceCodester Online Hotel Reservation System 1.0 contains a SQL injection vulnerability in an unknown function within deleteroominventory.php accessed by manipulating the ID parameter. The issue can be exploited remotely and has publicly disclosed exploits; multiple vendors and CVE records refe...
CVE-2025-10788 SourceCodester Online Hotel Reservation System deleteroominventory.php sql injection
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...
SourceCodester Online Hotel Reservation System 安全漏洞
SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A security vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which stems from a misuse of the parameter ID in the file deleteroominventory.php, which could lead to...
PT-2025-38695
Name of the Vulnerable Software and Affected Versions SourceCodester Online Hotel Reservation System version 1.0 Description A flaw exists in SourceCodester Online Hotel Reservation System version 1.0 where manipulation of the ID argument within an unknown function of the deleteroominventory.php...
PT-2025-38788
Name of the Vulnerable Software and Affected Versions themewant Easy Hotel Booking versions through 1.6.9 Description An issue exists in themewant Easy Hotel Booking that allows for DOM-Based Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation...