newwork-hr.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1117666 Security Researcher raviakp1004 Helped patch 679 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting newwork-hr.ch website an...

CVE-2019-12345

CVE-2019-12345 describes a Cross-Site Scripting vulnerability in the WordPress Kiboko Hostel plugin, affecting versions prior to 1.1.4. Multiple connected sources (WPVulndb, CVE trackers, and Red Hat/NVD mirrors) corroborate an XSS flaw in the plugin’s Booking-related UI that can execute client-s...