EUVD-2019-15541

Malware in sbrugna...

EUVD-2019-15540

Malware in sbrugna...

CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5973

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

WordPress Online Lesson Booking Plugin < 0.8.7 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2019-5973

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5972

CVE-2019-5972 affects the WordPress plugin Online Lesson Booking (versions 0.8.6 and earlier). It is a stored cross-site scripting (CWE-79) vulnerability that could allow remote attackers to inject arbitrary script/HTML, potentially executing in the browser of users with administrative privileges...

CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-5973

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5973

CVE-2019-5973 is a CSRF vulnerability in the WordPress Plugin “Online Lesson Booking” that affects version 0.8.6 and earlier. The flaw allows remote attackers to hijack an administrator’s authenticated session via unspecified vectors, potentially enabling unintended actions while the administrato...

CVE-2019-5972: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-17907 · Unknown · Online Lesson Booking

Name of the Vulnerable Software and Affected Versions: Online Lesson Booking versions 0.8.6 and earlier Description: A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. Recommendations: For versions 0.8.6 and earlier, update to a version late...

CVE-2019-5973: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Online Lesson Booking <= 0.8.6 - CSRF & XSS

The Online Lesson Booking WordPress plugin was affected by a CSRF & XSS security vulnerability...

JVN#96988995: Multiple vulnerabilities in WordPress Plugin "Online Lesson Booking"

WordPress Plugin "Online Lesson Booking" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5972 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

WordPress Online Lesson Booking Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Online Lesson Booking Plugin is an online booking plugin used in it. A cross-site scripting vulnerability exists in WordPres...