CVE-2022-29923 WordPress Quick Restaurant Reservations plugin <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

CVE-2022-29923

CVE-2022-29923 is an authenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin ThingsForRestaurants Quick Restaurant Reservations . The issue affects the plugin versions up to and including 1.4.1 and requires an administrator or higher user role to exploit (attack v...

PT-2022-19908 · WordPress · Quick Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: Quick Restaurant Reservations WordPress plugin versions 1.4.1 and earlier Description: The issue is a Cross-site Scripting XSS vulnerability, specifically a Reflected XSS, in the Quick Restaurant Reservations WordPress plugin. This...

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerabilit...

Malicious code in azure-arm-reservations-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d57ffc095bb09870c683f068b833768fa70ab2c8deceb40128e0e94e4a07f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1278 Malicious code in azure-arm-reservations-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d57ffc095bb09870c683f068b833768fa70ab2c8deceb40128e0e94e4a07f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29923

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

WordPress Quick Restaurant Reservations plugin <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by BEE-K Patchstack in WordPress Quick Restaurant Reservations plugin versions = 1.4.1. Solution Update the WordPress Quick Restaurant Reservations plugin to the latest available version at least 1.4.2...

WordPress Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form plugin <= 2.2.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form plugin versions = 2.2.4. Solution No patched version available...

WordPress Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form plugin <= 2.2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form plugin versions = 2.2.4. Solution No patched version available...

WordPress Five Star Restaurant Reservations plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the Wordpress Plugin Five Star Restaurant Reservations prior to version 2.4.8, which stems from the product's rtbwelcomesetschedule...

CVE-2021-24965

The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtbwelcomesetschedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform...

CVE-2021-24965

The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtbwelcomesetschedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform...

WordPress plugin 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the Wordpress Plugin Five Star Restaurant Reservations prior to version 2.4.8, which stems from the product's rtbwelcomesetschedule...

WordPress Five Star Restaurant Reservations plugin <= 2.4.7 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Five Star Restaurant Reservations plugin versions = 2.4.7. Solution Update the WordPress Five Star Restaurant Reservations plugin to the latest available version at least 2.4.8...

Five Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting

The plugin does not have capability and CSRF checks in the rtbwelcomesetschedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform Cross-Site Scripting attacks against logged in admins PoC A...

DEBIAN-CVE-2021-28704

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

WordPress ReDi Restaurant Reservation 21.0307 Plugin - (Comment) Stored Cross-Site Scripting

Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting XSS Exploit Author: Bastijn Ouwendijk Vendor Homepage: https://reservationdiary.eu/ Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/ Version: 21.0307 and earlier...

CVE-2021-24299 ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...

ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

The ReDi Restaurant Reservations plugin provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to ma...