Lucene search
K

93 matches found

RedhatCVE
RedhatCVE
added 2026/04/20 7:22 p.m.3 views

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References1
NVD
NVD
added 2026/04/18 2:16 a.m.1 views

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS0.00046EPSS
Exploits0References7
EUVD
EUVD
added 2026/04/18 1:26 a.m.0 views

EUVD-2026-23622

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/04/18 1:26 a.m.1 views

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/04/18 1:26 a.m.2 views

CVE-2026-1559 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/04/18 12:0 a.m.4 views

PT-2026-33579

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin place id' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acce...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/03/24 12:52 a.m.2 views

CVE-2026-4617 SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/apipatientcheckin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It i...

7.5CVSS6.7AI score0.0002EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/24 12:52 a.m.27 views

CVE-2026-4617 SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/apipatientcheckin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It i...

7.5CVSS0.0002EPSS
Exploits0References5
CVE
CVE
added 2026/03/24 12:52 a.m.3 views

CVE-2026-4617

The CVE-2026-4617 entry concerns SourceCodester Patients Waiting Area Queue Management System 1.0. The vulnerability affects the Patient Check-In Module, specifically the ValidateToken function in /php/api_patient_checkin.php. A manipulated token can cause improper authorization, and exploitation...

7.5CVSS6.7AI score0.0002EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:52 a.m.3 views

CVE-2026-4617

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/apipatientcheckin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It i...

7.5CVSS6.7AI score0.0002EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.3 views

SourceCodester Patients Waiting Area Queue Management System 授权问题漏洞

The SourceCodester Patients Waiting Area Queue Management System is an open-source system developed by SourceCodester for managing patient waiting queues. Version 1.0 of the SourceCodester Patients Waiting Area Queue Management System contains a vulnerability related to authorization issues. This...

7.5CVSS7.1AI score0.0002EPSS
Exploits0References5
OSV
OSV
added 2026/03/08 9:16 a.m.2 views

CVE-2026-3724

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patientid causes improper authorization. It is possible to initiate the attack remotely. The exploit has...

8.8CVSS6.4AI score
Exploits0References5
NVD
NVD
added 2026/03/08 9:16 a.m.1 views

CVE-2026-3724

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patientid causes improper authorization. It is possible to initiate the attack remotely. The exploit has...

8.8CVSS0.00048EPSS
Exploits1References5
CVE
CVE
added 2026/03/08 8:32 a.m.5 views

CVE-2026-3724

The CVE-2026-3724 issue affects SourceCodester Patients Waiting Area Queue Management System 1.0, with a vulnerability in /checkin.php where manipulating the argument patient_id causes improper authorization. This can be triggered remotely and an exploit is publicly available. Impact is described...

8.8CVSS5.6AI score0.00048EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/08 8:32 a.m.6 views

CVE-2026-3724 SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorization

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patientid causes improper authorization. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS5.6AI score0.00048EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/08 8:32 a.m.25 views

CVE-2026-3724 SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorization

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patientid causes improper authorization. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS0.00048EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 8:32 a.m.5 views

CVE-2026-3724

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patientid causes improper authorization. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS5.6AI score0.00048EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.4 views

SourceCodester Patients Waiting Area Queue Management System 授权问题漏洞

The SourceCodester Patients Waiting Area Queue Management System is an open-source system developed by SourceCodester for managing patient waiting queues. Version 1.0 of the SourceCodester Patients Waiting Area Queue Management System contains a vulnerability related to authorization issues. This...

8.8CVSS6.6AI score0.00048EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.7 views

PT-2026-23929

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patient id causes improper authorization. It is possible to initiate the attack remotely. The exploit ha...

6.5CVSS5.6AI score0.00048EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/02/09 1:23 p.m.7 views

CVE-2026-2150

A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /checkin.php. This manipulation of the argument patientid causes cross site scripting. The attack can be initiated remotely. Th...

6.1CVSS3.9AI score0.00014EPSS
Exploits1References1
Rows per page
Query Builder