CVE-2024-50425

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

CVE-2024-50425

CVE-2024-50425 : WP Booking System (WordPress plugin) has a Broken Access Control vulnerability that may expose sensitive information to unauthorized control spheres. Affected versions are up to 2.0.19.10; a fix is available in 2.0.19.11. Update the plugin to mitigate.

CVE-2024-50425: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through = 2.0.19.10...

WordPress WP Booking System Plugin <= 2.0.19.10 is vulnerable to Broken Access Control

Software WP Booking System Type Plugin Vulnerable versions = 2.0.19.10 Fixed in 2.0.19.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-50425 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID ad36b04a505d Credits Trương Hữu Phúc...

PT-2024-34199

Name of the Vulnerable Software and Affected Versions: WP Booking System versions 2.0.19.10 and earlier Description: The issue affects the exposure of sensitive system information to an unauthorized control sphere in the Veribo, Roland Murg WP Booking System. Recommendations: For WP Booking Syste...

WordPress WP Booking System Plugin <= 2.0.19.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Booking System Type Plugin Vulnerable versions = 2.0.19.8 Fixed in 2.0.19.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8797 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c8bb40c2d8e4 Credits vgo0...

CVE-2024-8797

The CVE-2024-8797 entry concerns the WP Booking System – Booking Calendar WordPress plugin. Affected versions up to and including 2.0.19.8 are vulnerable to Reflected Cross-Site Scripting due to improper escaping when using add_query_arg/remove_query_arg in the URL, enabling unauthenticated attac...

CVE-2024-8797 WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.0.19.8. This makes it possible for unauthenticated attackers...

CVE-2024-8797 WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.0.19.8. This makes it possible for unauthenticated attackers...

CVE-2024-8797: Improper Neutralization of Input During Web Page Generation

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.0.19.8. This makes it possible for unauthenticated attackers...

CVE-2023-24402

Auth. admin+ Cross-Site Scripting XSS vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin = 2.0.18 versions...

CVE-2023-24402

Auth. admin+ Cross-Site Scripting XSS vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin = 2.0.18 versions...

Cross site scripting

Auth. admin+ Cross-Site Scripting XSS vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin = 2.0.18 versions...

CVE-2023-24402

CVE-2023-24402 affects the WordPress WP Booking System – Booking Calendar plugin for Veribo, with versions

CVE-2023-24402: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Cross-Site Scripting XSS vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin = 2.0.18 versions...

CVE-2021-25061

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page...

CVE-2021-25061

CVE-2021-25061: WordPress WP Booking System plugin before 2.0.15 suffers a reflected XSS on the wpbs-calendars admin page. The vulnerability is authenticated (requires user login) and can execute JavaScript in the context of the affected site. Evidence across multiple sources confirms the flaw an...

CVE-2021-25061 WP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page...

PT-2022-9617

Name of the Vulnerable Software and Affected Versions WP Booking System versions prior to 2.0.15 Description The issue is related to a reflected XSS in the wp-booking-system on the wpbs-calendars admin page. This affects the WP Booking System WordPress plugin. Recommendations For versions prior t...

CVE-2021-25061: Improper Neutralization of Input During Web Page Generation

The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page...