WordPress booking-sms plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress booking-sms plugin. An attacker can exploit this...

WordPress booking-calendar-contact-form plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker...

WordPress booking-calendar-contact-form plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...

CVE-2013-7477

The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...

CVE-2016-10916

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...

Design/Logic Flaw

The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...

Sql injection

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...

CVE-2013-7477

The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...

CVE-2013-7477

The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...

CVE-2016-10916

CVE-2016-10916 affects the WordPress Appointment Booking Calendar plugin, with SQL injection in versions prior to 1.1.24. The three Red Hat/NVD/CNVD-style entries confirm an unauthenticated SQL injection vulnerability that can allow an attacker to execute arbitrary SQL commands (network access). ...

PT-2019-7026 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5.2 Description: The issue concerns a cross-site scripting XSS flaw in the booking form of the events-manager plugin. This type of flaw allows attackers to inject malicious scripts into the website,...

CVE-2016-10908

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...

CVE-2017-18555

The booking-sms plugin before 1.1.0 for WordPress has XSS...

CVE-2017-18555

The booking-sms plugin before 1.1.0 for WordPress has XSS...

CVE-2016-10909

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...

CVE-2016-10908

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...

Cross site scripting

The booking-sms plugin before 1.1.0 for WordPress has XSS...

Sql injection

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...

CVE-2017-18555

The booking-sms plugin before 1.1.0 for WordPress has XSS...

CVE-2017-18555

The CVE-2017-18555 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Booking-SMS plugin. Multiple sources (Red Hat, CNVD, NVD, CVE lists) confirm that the vulnerability affects the Booking-SMS plugin before version 1.1.0 and can be triggered in user-controlled input...