EUVD-2015-3938

Malware in sbrugna...

WordPress plugin Roomcloud 'roomcloud.php' has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Roomcloud is a plugin for online hotel booking. Multiple cross-site scripting vulnerabilities exist in the WordPress plugin Roomcloud 'roomcloud.php', which allow...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

CVE-2015-3904

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

PT-2015-6341

Name of the Vulnerable Software and Affected Versions Roomcloud plugin versions prior to 1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters in the roomcloud.php file. The vulnerable parameters include pin, start day, start month, start...

CVE-2015-3904: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

WordPress Roomcloud Plugin <= 1.2 - Multiple XSS

Because of these vulnerabilities in roomcloud.php, the attackers can inject arbitrary web script or HTML via 10 parameters: "pin", "lang", "startyear", "startmonth", "startday", "endday", "endmonth", "endyear", "adults", "children". Solution Update the plugin...

WordPress Roomcloud 1.1 Cross Site Scripting

Details Title: Unsanitized parameters in Wordpress Roomcloud plugin v1.1rev @1115307 allows Cross-site Scripting Submitter: Nitin Venkatesh Product: Wordpress Roomcloud plugin Product URL: https://wordpress.org/plugins/roomcloud Vulnerability Type: Cross-site Scripting CWE-79 Affected Versions:...

Roomcloud v1.1(rev @1115307) - Cross-Site Scripting (XSS)

The Roomcloud WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...