CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 est vulnérable à une injection CSV. Fournisseur : https://github.com/minical/minical Application de démo : https://demo.minical.io/ Preuve de concept Étape 1 : Naviguez vers le module Comptabilité et cliquez sur Créer un nouveau client. Étape 2 : Saisissez la charge...

CVE-2023-33408

CVE-2023-33408 Minical 1.0.0에는 저장형 크로스 사이트 스크립팅XSS 취약점이 있습니다. 공급업체: https://github.com/minical/minical 데모 애플리케이션: https://demo.minical.io/ PoC 1단계: Minical 애플리케이션에 로그인하고 Room-Room Status로 이동합니다. 2단계: Edit Room Note 옵션을 클릭하고 페이로드를 입력합니다. Payload= svg onload=alertdocument.location!-- 3단계: Save...

CVE-2023-46478

CVE-2023-46478 Minical 1.0.0 уязвим к IDOR. Вендор: https://github.com/minical/minical Демонстрационное приложение: https://demo.minical.io/ PoC Шаг 1: Я создал две учётные записи: пользователь A хакер и пользователь B walker-448 Шаг 2: Перейдите в учётную запись пользователя B, затем откройте...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 é vulnerável a Cross-Site Request Forgery. Fornecedor: https://github.com/minical/minical Aplicação de demonstração: https://demo.minical.io/ PoC A aplicação não possui nenhuma proteção CSRF, portanto, uma solicitação HTTP especialmente criada pode ser usada para:...

EUVD-2023-37572

Malicious code in bioql PyPI...

EUVD-2024-45690

Malicious code in bioql PyPI...

EUVD-2023-37571

Malicious code in bioql PyPI...

EUVD-2023-43977

Malicious code in bioql PyPI...

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2023-33409

Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...

CVE-2023-33410

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file...

CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

CVE-2023-3307

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/showbookings/. The manipulation of the argument searchquery leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

CVE-2024-51895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51895

CVE-2024-51895 is a Stored XSS in the Minical Hotel Booking Plugin for WordPress, caused by improper input neutralization during web page generation. Affected: Minical Hotel Booking Plugin versions n/a through 1.0.2. Connected sources corroborate the vulnerability and its impact. No public fix/ve...

WordPress plugin Minical Hotel Booking Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Minical Hotel Booking Plugin versions = 1.0.2...

WordPress Minical Hotel Booking Plugin Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Minical Hotel Booking Plugin Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51895 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 70c641f67968 Credits SOPROBRO Required privilege...