Lucene search
K

51 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-37572

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00147EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-43977

Malicious code in bioql PyPI...

8.8CVSS6.9AI score0.00065EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-45690

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00197EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37571

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00246EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:3 a.m.4 views

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

6.5CVSS7.2AI score0.00197EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.4 views

CVE-2023-33409

Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...

6.5CVSS7AI score0.00147EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.4 views

CVE-2023-33410

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file...

8.8CVSS7.4AI score0.00744EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.4 views

CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

5.4CVSS6.4AI score0.00246EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:57 a.m.3 views

CVE-2023-3307

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

8.8CVSS7.2AI score0.00065EPSS
Exploits1References1
NVD
NVD
added 2024/11/19 5:15 p.m.11 views

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

6.5CVSS0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.13 views

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

6.5CVSS0.00197EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.11 views

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

6.5CVSS8.6AI score0.00197EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.47 views

CVE-2024-51895

CVE-2024-51895 is a Stored XSS in the Minical Hotel Booking Plugin for WordPress, caused by improper input neutralization during web page generation. Affected: Minical Hotel Booking Plugin versions n/a through 1.0.2. Connected sources corroborate the vulnerability and its impact. No public fix/ve...

6.5CVSS7.2AI score0.00197EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.2 views

WordPress plugin Minical Hotel Booking Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00197EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/08 4:7 p.m.3 views

WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Minical Hotel Booking Plugin versions = 1.0.2...

6.5CVSS5.8AI score0.00197EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.7 views

WordPress Minical Hotel Booking Plugin Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Minical Hotel Booking Plugin Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51895 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 70c641f67968 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00197EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2023/06/21 12:0 a.m.18 views

miniCal SQL Injection Vulnerability

miniCal is miniCal open source an open source PMS. miniCal version 1.0.0 SQL injection vulnerability , the vulnerability stems from the file /booking/showbookings/ parameter searchquery lack of validation of external input SQL statements , an attacker can use this vulnerability to execute illegal...

8.8CVSS8.4AI score0.00065EPSS
Exploits1References1
OSV
OSV
added 2023/06/18 9:15 a.m.10 views

CVE-2023-3307

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

8.8CVSS7.4AI score
Exploits0References3
NVD
NVD
added 2023/06/18 9:15 a.m.6 views

CVE-2023-3307

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

8.8CVSS7.3AI score0.00065EPSS
Exploits1References3
Prion
Prion
added 2023/06/18 9:15 a.m.10 views

Sql injection

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS8.9AI score0.00065EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder