Lucene search
+L

3511 matches found

Patchstack
Patchstack
added 2025/09/22 6:39 p.m.10 views

WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Vinit Lakra in WordPress Plugin eZee Online Hotel Booking Engine versions = 1.0.0...

5.9CVSS6AI score0.00225EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.5 views

CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...

6.5CVSS5.2AI score0.00217EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.24 views

CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...

6.5CVSS0.00217EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.29 views

CVE-2025-57938

CVE-2025-57938 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Easy Hotel Booking (themename: Easy Hotel Booking) that is exploitable via improper input handling during web page generation. Affected version range is shown as “n/a through 1.6.9”; the CVSS vector (3...

6.5CVSS5.2AI score0.00217EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/09/22 6:25 p.m.10 views

CVE-2025-57938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...

6.5CVSS5.7AI score0.00217EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/22 6:23 p.m.19 views

CVE-2025-58661

Technical details not publicly provided in the supplied documents for CVE-2025-58661 (eZee Online Hotel Booking Engine). Update with affected versions, impact, and remediation when available.

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.21 views

CVE-2025-58661 WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eZee Technosys eZee Online Hotel Booking Engine online-booking-engine allows Stored XSS.This issue affects eZee Online Hotel Booking Engine: from n/a through = 1.0.0...

5.9CVSS0.00225EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 8:15 a.m.10 views

CVE-2025-10788

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00478EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/22 8:15 a.m.12 views

CVE-2025-10788

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/22 8:15 a.m.13 views

CVE-2025-10789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/22 8:15 a.m.10 views

CVE-2025-10789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

9.8CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 8:02 a.m.7 views

CVE-2025-10789 SourceCodester Online Hotel Reservation System deleteslide.php sql injection

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

7.5CVSS6.7AI score0.00478EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/22 8:02 a.m.23 views

CVE-2025-10789 SourceCodester Online Hotel Reservation System deleteslide.php sql injection

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

7.5CVSS0.00478EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/22 8:02 a.m.33 views

CVE-2025-10789

CVE-2025-10789 affects SourceCodester Online Hotel Reservation System 1.0, specifically the deleteslide.php file. The issue arises from manipulating the ID parameter, which leads to a SQL injection vulnerability. Remote exploitation is possible, and publicly available exploits exist. Multiple con...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/22 7:32 a.m.4 views

CVE-2025-10788 SourceCodester Online Hotel Reservation System deleteroominventory.php sql injection

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.7AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/22 7:32 a.m.43 views

CVE-2025-10788

SourceCodester Online Hotel Reservation System 1.0 contains a SQL injection vulnerability in an unknown function within deleteroominventory.php accessed by manipulating the ID parameter. The issue can be exploited remotely and has publicly disclosed exploits; multiple vendors and CVE records refe...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/22 7:32 a.m.28 views

CVE-2025-10788 SourceCodester Online Hotel Reservation System deleteroominventory.php sql injection

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.10 views

SourceCodester Online Hotel Reservation System 安全漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A security vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which stems from a misuse of the parameter ID in the file deleteroominventory.php, which could lead to...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.17 views

PT-2025-38695

Name of the Vulnerable Software and Affected Versions SourceCodester Online Hotel Reservation System version 1.0 Description A flaw exists in SourceCodester Online Hotel Reservation System version 1.0 where manipulation of the ID argument within an unknown function of the deleteroominventory.php...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.13 views

PT-2025-38788

Name of the Vulnerable Software and Affected Versions themewant Easy Hotel Booking versions through 1.6.9 Description An issue exists in themewant Easy Hotel Booking that allows for DOM-Based Cross-site Scripting XSS. This occurs due to improper neutralization of input during web page generation...

6.5CVSS6.3AI score0.00217EPSS
SaveExploits0References3
Rows per page
Query Builder