7852 matches found
WordPress booking-calendar-contact-form plugin SQL injection vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...
CVE-2013-7477
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
CVE-2016-10916
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
Sql injection
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
Design/Logic Flaw
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
CVE-2013-7477
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
CVE-2013-7477
The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...
CVE-2016-10916
CVE-2016-10916 affects the WordPress Appointment Booking Calendar plugin, with SQL injection in versions prior to 1.1.24. The three Red Hat/NVD/CNVD-style entries confirm an unauthenticated SQL injection vulnerability that can allow an attacker to execute arbitrary SQL commands (network access). ...
PT-2019-7026 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5.2 Description: The issue concerns a cross-site scripting XSS flaw in the booking form of the events-manager plugin. This type of flaw allows attackers to inject malicious scripts into the website,...
CVE-2016-10908
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2016-10909
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...
CVE-2016-10908
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
Cross site scripting
The booking-sms plugin before 1.1.0 for WordPress has XSS...
Sql injection
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...
CVE-2017-18555
The booking-sms plugin before 1.1.0 for WordPress has XSS...
CVE-2017-18555
The CVE-2017-18555 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Booking-SMS plugin. Multiple sources (Red Hat, CNVD, NVD, CVE lists) confirm that the vulnerability affects the Booking-SMS plugin before version 1.1.0 and can be triggered in user-controlled input...
CVE-2016-10909
The CVE-2016-10909 entry concerns the WordPress Booking Calendar Contact Form plugin prior to 1.0.24, which is vulnerable to SQL Injection due to an input handling flaw in that plugin version. The issue is documented consistently across multiple sources (NVD, Red Hat, CVE registries, CNVD, PRION,...
CVE-2016-10908
CVE-2016-10908 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin booking-calendar-contact-form when using versions before 1.0.24. The issue is a vulnerability in the plugin's handling of input/output that could allow an attacker to inject client-side code. The affected ...