2 matches found
VulnCheck KEV: CVE-2020-29047
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php...
PT-2018-5777 · Freedesktop.Org +4 · Xdg-User-Dirs +4
Name of the Vulnerable Software and Affected Versions: xdg-user-dirs versions prior to 0.15.5 Description: A issue was found where the system umask policy is not being honored when creating XDG user directories. This occurs because Xsession sources xdg-user-dirs.sh before setting the umask policy...