37 matches found
PT-2022-14199 · WordPress · Rezgo Online Booking
Name of the Vulnerable Software and Affected Versions: Rezgo Online Booking WordPress plugin versions prior to 4.1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. This occurs because some parameters are not properly sanitised and escaped before being outputted bac...
WordPress Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting (XSS) vulnerability
Reflected Cross-Site-Scripting XSS vulnerability discovered by cydave in WordPress Rezgo Online Booking versions = 4.1.7. Solution Update the WordPress Rezgo plugin to the latest available version at least 4.1.8...
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file Direct call:...
Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file PoC Direct call:...
zumatours.net XSS vulnerability
Vulnerable URL: http://www.zumatours.net/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=pagedetails=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:32 GMT...
CVE-2014-4546
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
CVE-2014-4546
CVE-2014-4546 affects the WordPress Rezgo plugin (versions 1.4.2 and earlier) and is caused by a flaw in a script handling the response parameter within the file book_ajax.php , allowing remote attackers to inject arbitrary web script or HTML (XSS). Affected component: Rezgo WordPress plugin; vul...
CVE-2014-4546
Cross-site scripting XSS vulnerability in bookajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter...
CVE-2014-4547
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
CVE-2014-4547
Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...
CVE-2014-4547
The CVE-2014-4547 entry concerns the Rezgo Online Booking WordPress plugin. It describes multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php that allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter in plugi...
WordPress Rezgo Plugin <= 1.4.2 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "response" parameter. Solution Update the plugin...
WordPress Rezgo Online Booking Plugin <= 1.8.1 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...