36 matches found
EUVD-2018-1332
Malware in sbrugna...
EUVD-2024-52553
Malicious code in bioql PyPI...
WordPress plugin WP Simple Booking Calendar 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2023-51525
Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...
CVE-2021-24726
The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue...
CVE-2024-54433
Cross-Site Request Forgery CSRF vulnerability in Marcel CL Simple Booking Widget simple-booking-widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through = 1.1...
CVE-2024-54433
Cross-Site Request Forgery CSRF vulnerability in Marcel CL Simple Booking Widget simple-booking-widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through = 1.1...
CVE-2024-54433 WordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Simple Booking Simple Booking Widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through 1.1...
CVE-2024-54433 WordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Marcel CL Simple Booking Widget simple-booking-widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through = 1.1...
CVE-2024-54433
CVE-2024-54433 describes a CSRF vulnerability in the Simple Booking Widget that can lead to stored XSS. Affected software is Simple Booking Widget (version range from n/a through 1.1). Connected sources confirm the issue and indicate patch status as Unpatched; no public exploitation status is pro...
PT-2024-36323 · Unknown · Simple Booking Widget
Name of the Vulnerable Software and Affected Versions: Simple Booking Widget versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Simple Booking Simple Booking Widget, which allows Stored XSS. Recommendations: For versions n/a through 1.1, update t...
WordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Booking Widget versions = 1.1...
CVE-2024-8663
CVE-2024-8663: WP Simple Booking Calendar (WordPress)
WordPress WP Simple Booking Calendar Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)
Software WP Simple Booking Calendar Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 00e7be38a235 Credits vgo0...
WordPress plugin WP Simple Booking Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...
CVE-2023-51525
Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...
CVE-2023-51525
CVE-2023-51525 concerns the WordPress plugin WP Simple Booking Calendar (Veribo/Roland Murg). A CSRF vulnerability affects versions up to 2.0.8.4 (likely fixed in later releases). Root cause: improper CSRF protection enabling unauthorized actions on behalf of an authenticated user. Impact: potent...
CVE-2023-51525 WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...
WordPress plugin WP Simple Booking Calendar Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress WP Simple Booking Calendar Plugin <= 2.0.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Simple Booking Calendar Type Plugin Vulnerable versions = 2.0.8.4 Fixed in 2.0.8.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51525 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7e20b6088220 Credits...