CVE-2015-3904

CVE-2015-3904 concerns the Roomcloud WordPress plugin. The vulnerability is a cross-site scripting (XSS) flaw in roomcloud.php before version 1.3, allowing remote attackers to inject arbitrary script/HTML via any of ten parameters: pin, start_day, start_month, start_year, end_day, end_month, end_...