CVE-2015-3904

CVE-2015-3904 concerns the Roomcloud WordPress plugin. The vulnerability is a cross-site scripting (XSS) flaw in roomcloud.php before version 1.3, allowing remote attackers to inject arbitrary script/HTML via any of ten parameters: pin, start_day, start_month, start_year, end_day, end_month, end_...

CVE-2015-3904

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

PT-2015-6341

Name of the Vulnerable Software and Affected Versions Roomcloud plugin versions prior to 1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters in the roomcloud.php file. The vulnerable parameters include pin, start day, start month, start...

CVE-2015-3904: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...