WordPress Conference Scheduler plugin <= 2.4.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Conference Scheduler plugin versions = 2.4.2. Solution Update the WordPress Conference Scheduler plugin to the latest available version at least 2.4.3...

Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/edit.php?posttype=confworkshop&page=confscheduleroptions&tab="...

WordPress Content Scheduler: Editorial Calendar and Notes plugin < 1.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Content Scheduler: Editorial Calendar and Notes plugin versions 1.2.0. Solution Update the WordPress Content Scheduler: Editorial Calendar and Notes plugin to the latest available version at least 1.2.0...

WordPress Content Scheduler: Editorial Calendar and Notes plugin < 1.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Scheduler: Editorial Calendar and Notes plugin versions 1.2.0. Solution Update the WordPress Content Scheduler: Editorial Calendar and Notes plugin to the latest available version at least 1.2....

WordPress Menu Item Scheduler plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Menu Item Scheduler plugin versions = 1.0.0. Solution No patched version available...

KDE KCron 权限许可和访问控制问题漏洞

KDE KCron is a task scheduler. KDE Kcron is vulnerable to privilege permission and access control issues, which could be exploited by an attacker to run unauthorized commands...

SourceCodester Online Covid Vaccination Scheduler System Cross-Site Scripting Vulnerability

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. Sourcecodester Online Covid Vaccine Scheduler System v1 is vulnerable to a cross-site scripting vulnerability caused by a lack of escaping or filtering of user data in the lid parameter of the...

Cross-site Scripting (XSS) - Reflected in effgarces/bookedscheduler

Setup the Booked Scheduler locally.URL like the following. http://192.168.5.5/phpsch/ Attcker 2. Login as valid user. 3. Make an reservation from the dashboard. 4. Open the information you reserved.URL like the following http://192.168.5.5/Web/reservation.php?rn=62020af2eee4d833634703 5. The...

SourceCodester Online Covid Vaccination Scheduler System跨站脚本漏洞（CNVD-2022-13077）

SourceCodester Online Covid Vaccination Scheduler System is an application of SourceCodester, Inc. Sourcecodester Online Covid Vaccine Scheduler System is a cross-site scripting vulnerability that stems from the lack of escaping or filtering of user data in the software lid parameter, which could...

CVE-2022-23837

A denial of service vulnerability was found in job scheduler sidekiq. An attacker can request statistics for the graph and, since there were no limits on the days parameter, overload the system, affecting the WebUI...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

Cross site scripting

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

Sql injection

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

CVE-2021-41930

The CVE-2021-41930 entry concerns a Cross-Site Scripting (XSS) vulnerability in SourceCodester’s Online Covid Vaccination Scheduler System v1 (developer: oretnom23). The issue arises from lack of escaping/filtering of data in the lid parameter passed to /scheduler/addSchedule.php, enabling arbitr...

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

CVE-2021-41660

The CVE-2021-41660 entry relates to a SQL injection in Sourcecodester Patient Appointment Scheduler System v1 (author oretnom23). The vulnerability is triggered through unsanitized input in the login.php username and password fields, allowing an attacker to execute arbitrary SQL commands. Public ...