37 matches found
WordPress plugin Rezgo Online Booking 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file PoC Direct call:...
WordPress Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting (XSS) vulnerability
Reflected Cross-Site-Scripting XSS vulnerability discovered by cydave in WordPress Rezgo Online Booking versions = 4.1.7. Solution Update the WordPress Rezgo plugin to the latest available version at least 4.1.8...
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file Direct call:...
zumatours.net XSS vulnerability
Vulnerable URL: http://www.zumatours.net/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=pagedetails=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:32 GMT...
CVE-2014-4546
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
CVE-2014-4546
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
CVE-2014-4546
CVE-2014-4546 affects the WordPress Rezgo plugin (versions 1.4.2 and earlier) and is caused by a flaw in a script handling the response parameter within the file book_ajax.php , allowing remote attackers to inject arbitrary web script or HTML (XSS). Affected component: Rezgo WordPress plugin; vul...
CVE-2014-4547
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
CVE-2014-4547
The CVE-2014-4547 entry concerns the Rezgo Online Booking WordPress plugin. It describes multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php that allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter in plugi...
CVE-2014-4547
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
WordPress Rezgo Plugin <= 1.4.2 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "response" parameter. Solution Update the plugin...
WordPress Rezgo Online Booking Plugin <= 1.8.1 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...