Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-33787

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00162EPSS
Exploits0References2
CNVD
CNVD
added 2022/05/23 12:0 a.m.13 views

WordPress Opal Hotel Room Booking plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Opal Hotel Room Booking plugin 1.2.7 and earlier versions contain a cross-site scripting...

5.4CVSS2.3AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2022/05/19 4:15 p.m.1 views

CVE-2022-29449

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

5.4CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/05/19 4:15 p.m.10 views

CVE-2022-29449

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

5.4CVSS0.00162EPSS
Exploits0References2
Prion
Prion
added 2022/05/19 4:15 p.m.10 views

Cross site scripting

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

3.5CVSS5.2AI score0.00162EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/05/19 3:15 p.m.8 views

CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

4.1CVSS4.2AI score0.00162EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/05/19 3:15 p.m.13 views

CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

4.1CVSS5.4AI score0.00162EPSS
Exploits0References2
CVE
CVE
added 2022/05/19 3:15 p.m.74 views

CVE-2022-29449

The CVE-2022-29449 entry concerns the WordPress Opal Hotel Room Booking plugin up to version 1.2.7. The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) flaw in a parameter that is not properly sanitized/escaped, allowing users with contributor+ roles to inject JavaScript that ...

5.4CVSS4.6AI score0.00162EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/05/19 12:0 a.m.2 views

WordPress plugin Opal Hotel Room Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Opal Hotel Room Booking plugin 1.2.7 and earlier versions contain a cross-site scripting...

5.4CVSS5.8AI score0.00162EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/05/19 12:0 a.m.3 views

PT-2022-19623 · WordPress · Opal Hotel Room Booking

Name of the Vulnerable Software and Affected Versions: Opal Hotel Room Booking plugin versions prior to 1.2.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher user role can inject malicious...

5.4CVSS5AI score0.00162EPSS
Exploits0References5
Patchstack
Patchstack
added 2022/05/17 12:0 a.m.31 views

WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Opal Hotel Room Booking plugin versions = 1.2.7. Solution Deactivate and delete. No reply from the vendor...

5.4CVSS2.1AI score0.00162EPSS
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2022/05/17 12:0 a.m.15 views

Opal Hotel Room Booking <= 1.2.7 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape a parameter which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

5.4CVSS2.7AI score0.00162EPSS
Exploits0Affected Software1
Rows per page
Query Builder