Webkul Qloapps 1.5.2 - Cross-Site Scripting Vulnerability

Exploit Title: Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://qloapps.com/ Software Link: https://github.com/webkul/hotelcommerce Version: 1.5.2 Tested on: Kali Linux 2022.4 CVE : CVE-2023-30256 Description: A Cross Site Scripting XSS...

Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)

Exploit Title: Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Date: 15 May 2023 Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://qloapps.com/ Software Link: https://github.com/webkul/hotelcommerce Version: 1.5.2 Tested on: Kali Linux 2022.4 CVE : CVE-2023-30256 Description: A Cross...

Exploit for Cross-site Scripting in Webkul Qloapps

Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloAp...

GHSA-V829-J9RR-85V9 Cross-site Scripting in krayin/laravel-crm

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

Cross-site Scripting in krayin/laravel-crm

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

CVE-2021-41924

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

CVE-2021-41924

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

CVE-2021-41924

CVE-2021-41924 affects Webkul krayin crm prior to 1.2.2. The root cause is an XSS in the datagrid render path (lack of sanitization in v-html in table-body.vue), enabling attacker-controlled script execution when viewing data. Remediation identified: upgrade to version 1.2.2 or newer. Other sourc...

Webkul krayin crm 跨站脚本漏洞

Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...

GHSA-PWRF-Q7H8-JJR7 Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

ALPINE-CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Code injection

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, a lack of proper access control allows a user to modify their own data and that of other customers (e.g., address, reviews, orders) via vulnerable customer-endpoints. The root cause is an authorization/control flaw on customer data modification endpoints (e.g., /cu...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Ajax Quiz by Webkul,2.0,SQL Injection

Ajax Quiz by Webkul, 2.0 and previous, SQL Injection Resolution: update to version 2.1 Update notice: https://store.webkul.com/AjaxQuiz.html...