CVE-2024-31425

Cross-Site Request Forgery CSRF vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95...

CVE-2024-31425

CVE-2024-31425 is a Cross-Site Request Forgery (CSRF) vulnerability in the Amelia Booking plugin for WordPress, affecting Amelia versions up to 1.0.95. The linked sources identify the issue and flag it as patched in Wordfence/Red Hat records, indicating a fix has been applied. Technical details i...

CVE-2024-31425: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95...

PT-2024-24066 · Unknown · Tms Amelia

Name of the Vulnerable Software and Affected Versions: TMS Amelia versions 1.0.95 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

CVE-2024-20334: Improper Input Validation

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

CVE-2023-50630

Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...

PT-2024-13949 · Unknown · Xiweicheng Tms

Name of the Vulnerable Software and Affected Versions: xiweicheng TMS version 2.28.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted script to the click here function. This enables the attacker to perform unauthorized actions on the...

CVE-2023-50630

Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...

TMS Security Vulnerabilities

TMS is a channel-based team communication and collaboration + lightweight task dashboard for weicheng individual developers. A security vulnerability exists in xiweicheng TMS version v.2.28.0, which stems from a cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to...

CVE-2023-50630

Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...

CVE-2023-50630

CVE-2023-50630 : The connected documents confirm a Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v2.28.0 . A remote attacker can execute arbitrary code through a crafted script to the “click here” function. The details do not provide concrete exploit steps, affected components beyond...

CVE-2023-50630: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...

CVE-2023-50630

Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...

CVE-2023-50860 WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Booking for Appointments and Events Calendar – Amelia allows Stored XSS.This issue affects Booking for Appointments and Events Calendar – Amelia: from n/a through 1.0.85...

CVE-2023-50860

CVE-2023-50860 is a Stored XSS in the Booking for Appointments and Events Calendar – Amelia plugin for WordPress, affecting Amelia Booking versions up to 1.0.85. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious input to be reflected and...

PT-2023-31693 · Unknown · Tms Booking For Appointments/Events Calendar – Amelia

Name of the Vulnerable Software and Affected Versions: TMS Booking for Appointments and Events Calendar – Amelia versions 1.0 through 1.0.85 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means...

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...