7900 matches found
CVE-2018-0513
The CVE-2018-0513 entry affects the WordPress plugins MTS Simple Booking C and MTS Simple Booking Business (version 1.28.0 and earlier). The root cause is a stored cross-site scripting vulnerability (CWE-79) in these plugins, allowing an attacker to inject arbitrary scripts via unspecified vector...
CVE-2018-0513
Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
MTS Simple Booking C and MTS Simple Booking Business Cross-Site Scripting Vulnerabilities
MTS Simple Booking C and MTS Simple Booking Business are both online booking plugins for WordPress developed by MT Systems Japan. A cross-site scripting vulnerability exists in MTS Simple Booking C and MTS Simple Booking Business versions 1.28.0 and earlier. A remote attacker can exploit this...
JVN#99312352: WordPress plugin "MTS Simple Booking C" vulnerable to cross-site scripting
The WordPress plugin "MTS Simple Booking C" provided by MT Systems Co., Ltd. contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user who logged-in as an administrator. Solution Update the plugin Update the plugin accordi...
roombookingsystem.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-547379 Description| Value ---|--- Affected Website:| roombookingsystem.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress Booking calendar plugin <=2.1.7 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found by d4wner in WordPress Booking calendar plugin versions =2.1.7. Solution Update the WordPress Booking calendar plugin to the latest available version at least 2.1.8...
WordPress Booking calendar plugin <=2.1.7 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by d4wner in WordPress Booking calendar plugin versions =2.1.7. Solution Update the WordPress Booking calendar plugin to the latest available version at least 2.1.8...
Online Hotel Booking System Pro 1.3 SQL Injection
==================================================================================================== | Title : Online Hotel Booking System Pro 1.3 Sql injection vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : 1.3 ...
WordPress booking-calendar plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site request forgery vulnerability...
WordPress booking-calendar plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...
WordPress booking-calendar plugin cross-site scripting vulnerability (CNVD-2018-01251)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...
WordPress booking-calendar plugin cross-site scripting vulnerability (CNVD-2018-01252)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...
booking.traveleurope.it XSS vulnerability
Open Bug Bounty ID: OBB-527215 Description| Value ---|--- Affected Website:| booking.traveleurope.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-5671
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extrafield1itemsfielditem1pricepercent parameter...
CVE-2018-5672
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php formfield5label parameter...
CVE-2018-5671
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extrafield1itemsfielditem1pricepercent parameter...
CVE-2018-5672
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php formfield5label parameter...
CVE-2018-5673
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php...