WordPress Time Slot Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Time Slot Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50418 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f8e4da1ec940 Credits Khalid Yusuf Required privilege Contributor...

CVE-2023-3544

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

Cross site scripting

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

CVE-2023-3544

CVE-2023-3544 affects GZ Scripts Time Slot Booking Calendar PHP 1.8. The vulnerability exists in an unknown portion of /load.php and is triggered by manipulating the parameters first_name, second_name, phone, address_1, or country, leading to cross-site scripting. Attacker could exploit remotely;...

CVE-2023-3544 GZ Scripts Time Slot Booking Calendar PHP load.php cross site scripting

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

PT-2023-25217 · Unknown · Gz Scripts Time Slot Booking Calendar Php

Name of the Vulnerable Software and Affected Versions: GZ Scripts Time Slot Booking Calendar PHP version 1.8 Description: A vulnerability was found in the software, affecting unknown code of the file /load.php. The manipulation of the arguments first name, second name, phone, address 1, country...

CVE-2023-3544: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

Time Slot Booking Calendar PHP 跨站脚本漏洞

Time Slot Booking Calendar PHP is a GZ Scripts open source time booking calendar system . GZ Scripts Time Slot Booking Calendar PHP version 1.8 cross-site scripting vulnerability , the vulnerability stems from the file /load.php parameters firstname/secondname/phone/address1/country will lead to...

Time Slot Booking Calendar 1.8 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Unauthorized Extension Of Token Validity

simplesamlphp is vulnerable to having a token's validity period extended by an unauthorized party. The vulnerability is possible because there is a flaw in the calculateTokenValue function in TimeLimitedToken.php. The flaw allows an attacker to extend the prepended offset as much as needed to hit...