Daybyday CRM 授权问题漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. DayByDay CRM Information Disclosure Vulnerability, the vulnerability stems from the product's failure to add an effective restriction o...

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

CVE-2021-20840

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20840

The CVE-2021-20840 entry concerns the Booking Package - Appointment Booking Calendar System WordPress plugin. Affected versions are prior to 1.5.11, with the root cause described as insufficient input validation in certain URL query parameters, leading to Cross-Site Scripting (XSS). The practical...

CVE-2021-20840

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors...

WordPress Appointment Booking Calendar System Plugin Cross-Site Scripting Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

Appointment Booking Calendar System 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

WordPress Appointment Hour Booking plugin cross-site scripting vulnerability (CNVD-2022-86554)

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress Appointment Hour Booking plugin prior to 1.3.17, which stems from a lack of validation of user input data and filtering of input data for the...

CVE-2021-24712

The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars...

CVE-2021-24712

CVE-2021-24712 concerns the WordPress plugin “Appointment Hour Booking” (before 1.3.17). The root cause is inadequate sanitization of values used when creating new calendars, enabling an authenticated stored XSS attack. Impact is cross-site scripting via calendar name fields; exploitation require...

WordPress 插件 跨站脚本漏洞

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress Appointment Hour Booking plugin prior to 1.3.17, which stems from a lack of validation of user input data and filtering of input data for the...

WordPress Appointment Hour Booking plugin cross-site scripting vulnerability (CNVD-2022-01701)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Appointment Hour Booking plugin suffers fro...

CVE-2021-24673

The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24673

The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24673

CVE-2021-24673 affects the WordPress Appointment Hour Booking plugin prior to v1.3.16. The vulnerability arises from insufficient escaping in Calendar Form settings, allowing authenticated high-privilege users to perform Stored Cross-Site Scripting (XSS) even when unfiltered_html is disallowed. I...

WordPress Appointment Hour Booking 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Appointment Hour Booking plugin suffers fro...

The vulnerability of the index.php/appointment/insert_patient_add_appointment component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/insertpatientaddappointment component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity ...

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...