CVE-2023-33408

CVE-2023-33408 Minical 1.0.0 est vulnérable à une faille de type Cross-Site Scripting XSS stockée. Fournisseur : https://github.com/minical/minical Application de démonstration : https://demo.minical.io/ PoC Étape 1 : Connectez-vous à l'application Minical et naviguez jusqu'à Room - Room Status...

CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 уязвим для CSV-инъекций. Разработчик: https://github.com/minical/minical Демо-приложение: https://demo.minical.io/ PoC Шаг 1: Перейдите в модуль "Учет" и нажмите "Создать нового клиента". Шаг 2: Введите полезную нагрузку в поле "Имя" и нажмите "Создать". Payload:...

CVE-2023-46478

CVE-2023-46478 Minical 1.0.0 уязвим к IDOR. Вендор: https://github.com/minical/minical Демонстрационное приложение: https://demo.minical.io/ PoC Шаг 1: Я создал две учётные записи: пользователь A хакер и пользователь B walker-448 Шаг 2: Перейдите в учётную запись пользователя B, затем откройте...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 уязвим к межсайтовой подделке запросов CSRF. Разработчик: https://github.com/minical/minical Демо-приложение: https://demo.minical.io/ PoC В приложении отсутствует защита от CSRF, поэтому специально сформированный HTTP-запрос может быть использован для: Добавления...

EUVD-2023-37572

Malicious code in bioql PyPI...

EUVD-2024-45690

Malicious code in bioql PyPI...

EUVD-2023-43977

Malicious code in bioql PyPI...

EUVD-2023-37571

Malicious code in bioql PyPI...

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2023-33409

Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...

CVE-2023-33410

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file...

CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

CVE-2023-3307

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895

CVE-2024-51895 is a Stored XSS in the Minical Hotel Booking Plugin for WordPress, caused by improper input neutralization during web page generation. Affected: Minical Hotel Booking Plugin versions n/a through 1.0.2. Connected sources corroborate the vulnerability and its impact. No public fix/ve...

WordPress plugin Minical Hotel Booking Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-51895: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Minical Hotel Booking Plugin versions = 1.0.2...