405 matches found
CVE-2024-22298
Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98...
CVE-2023-23876
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in TMS-Plugins wpDataTables plugin = 2.1.49 versions...
Marc@TMS CMS 1.0 SQL Injection
============================================================================================================================================= | Title : Marc@TMS cms v1.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits...
CVE-2024-22298
Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98...
CVE-2024-22298
Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98...
CVE-2024-31425
Cross-Site Request Forgery CSRF vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95...
CVE-2024-31425
CVE-2024-31425 is a Cross-Site Request Forgery (CSRF) vulnerability in the Amelia Booking plugin for WordPress, affecting Amelia versions up to 1.0.95. The linked sources identify the issue and flag it as patched in Wordfence/Red Hat records, indicating a fix has been applied. Technical details i...
PT-2024-24066 · Unknown · Tms Amelia
Name of the Vulnerable Software and Affected Versions: TMS Amelia versions 1.0.95 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...
CVE-2023-50630
Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...
TMS Security Vulnerabilities
TMS is a channel-based team communication and collaboration + lightweight task dashboard for weicheng individual developers. A security vulnerability exists in xiweicheng TMS version v.2.28.0, which stems from a cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to...
PT-2024-13949 · Unknown · Xiweicheng Tms
Name of the Vulnerable Software and Affected Versions: xiweicheng TMS version 2.28.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted script to the click here function. This enables the attacker to perform unauthorized actions on the...
CVE-2023-50630
Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...
CVE-2023-50630
Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...
CVE-2023-50630
CVE-2023-50630 : The connected documents confirm a Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v2.28.0 . A remote attacker can execute arbitrary code through a crafted script to the “click here” function. The details do not provide concrete exploit steps, affected components beyond...
CVE-2023-50630
Cross Site Scripting XSS vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function...
CVE-2023-50860 WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Booking for Appointments and Events Calendar – Amelia allows Stored XSS.This issue affects Booking for Appointments and Events Calendar – Amelia: from n/a through 1.0.85...
CVE-2023-50860
CVE-2023-50860 is a Stored XSS in the Booking for Appointments and Events Calendar – Amelia plugin for WordPress, affecting Amelia Booking versions up to 1.0.85. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious input to be reflected and...
PT-2023-31693 · Unknown · Tms Booking For Appointments/Events Calendar – Amelia
Name of the Vulnerable Software and Affected Versions: TMS Booking for Appointments and Events Calendar – Amelia versions 1.0 through 1.0.85 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means...