Lucene search
+L

3020 matches found

Patchstack
Patchstack
•added 2024/05/20 9:28 a.m.•18 views

WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability

Appointment Duration Manipulation vulnerability discovered by Mochamad Sofyan Patchstack Alliance in WordPress Plugin BookingPress versions = 1.0.82...

6.5CVSS7AI score0.00368EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/05/17 10:15 a.m.•33 views

CVE-2024-32720

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...

5.3CVSS5.4AI score0.00351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/17 9:37 a.m.•14 views

CVE-2024-32720 WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...

5.3CVSS7AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/17 9:37 a.m.•71 views

CVE-2024-32720

CVE-2024-32720 corresponds to a CAPTCHA bypass vulnerability in the WordPress plugin Appointment Hour Booking (versions

5.3CVSS6.8AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/17 9:37 a.m.•46 views

CVE-2024-32720 WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...

5.3CVSS5.3AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•15 views

WordPress plugin Appointment Hour Booking has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.8AI score0.00351EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•8 views

CVE-2024-32720: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...

5.3CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•5 views

PT-2024-24808

Name of the Vulnerable Software and Affected Versions CodePeople Appointment Hour Booking versions 1.4.56 and earlier Description The issue is related to an Improper Restriction of Excessive Authentication Attempts vulnerability, which allows removing important client functionality. Recommendatio...

5.3CVSS0.00351EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/05/16 11:05 a.m.•36 views

CVE-2024-4288 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in versions up to, and including, 1.6.7.14 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6.3AI score0.00322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•8 views

CVE-2024-4288: Improper Neutralization of Input During Web Page Generation

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in versions up to, and including, 1.6.7.14 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•6 views

PT-2024-30190

Name of the Vulnerable Software and Affected Versions The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress versions up to, and including, 1.6.7.14 Description The issue is related to Stored Cross-Site Scripting via the link parameter due to...

6.4CVSS6.1AI score0.00322EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•17 views

WordPress Plugin Appointment Booking Calendar has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2024/05/15 12:00 a.m.•22 views

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in versions up to, and including, 1.6.7.14 due to insufficient input sanitization and output escaping. This makes i...

6.4CVSS5.7AI score0.00322EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/05/03 12:00 a.m.•15 views

Appointment Hour Booking < 1.4.57 - Captcha Bypass

Description The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.4.56. This makes it possible for unauthenticated attackers to bypass the Captcha Verification...

5.3CVSS7.1AI score0.00351EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2024/04/29 12:00 a.m.•373 views

Doctor Appointment Management System 1.0 Cross Site Scripting

Application Name: Doctor Appointment Management System Software Link: Download Link Vendor Homepage: Vendor Homepage BuG: XsS BUGAuthor: SoSPiro Version: 1.0 CVE: CVE-2024-4293 Vulnerable code section: - http://localhost/Doctor-Appointment-SystemPHP/dams/doctor/appointment-bwdates.php - Lines 57-...

5.4CVSS7.2AI score0.00635EPSS
SaveExploits3
zdt
zdt
•added 2024/04/29 12:00 a.m.•392 views

Doctor Appointment Management System 1.0 Cross Site Scripting Vulnerability

Application Name: Doctor Appointment Management System Software Link: Download Link Vendor Homepage: Vendor Homepage BuG: XsS BUGAuthor: SoSPiro Version: 1.0 CVE: CVE-2024-4293 Vulnerable code section: - http://localhost/Doctor-Appointment-SystemPHP/dams/doctor/appointment-bwdates.php - Lines 57-...

5.4CVSS7.2AI score0.00635EPSS
SaveExploits3
osv_cve
osv_cve
•added 2024/04/27 11:15 p.m.•19 views

CVE-2024-4294

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

8.8CVSS5.5AI score0.00855EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/27 11:15 p.m.•29 views

CVE-2024-4294

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

8.8CVSS6.5AI score0.00855EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/27 10:31 p.m.•90 views

CVE-2024-4294

The CVE-2024-4294 entry concerns PHPGurukul Doctor Appointment Management System 1.0. Affected component: /doctor/view-appointment-detail.php, where the editid parameter leads to improper control of resource identifiers (IDOR). The vulnerability is described as exploitable remotely, with public d...

8.8CVSS6.3AI score0.00855EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/04/27 10:31 p.m.•46 views

CVE-2024-4294 PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

6.5CVSS6.8AI score0.00855EPSS
SaveExploits1References4
Rows per page
Query Builder