CVE-2015-3904

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

CVE-2015-3904

CVE-2015-3904 concerns the Roomcloud WordPress plugin. The vulnerability is a cross-site scripting (XSS) flaw in roomcloud.php before version 1.3, allowing remote attackers to inject arbitrary script/HTML via any of ten parameters: pin, start_day, start_month, start_year, end_day, end_month, end_...