2 matches found
CVE-2022-1932
The CVE-2022-1932 entry concerns the Rezgo Online Booking WordPress plugin, prior to version 4.1.8, which fails to sanitize and escape certain parameters when outputting them to a page. This leads to a Reflected Cross-Site Scripting (XSS) vulnerability that can be triggered via a Local File Inclu...
CVE-2024-53800
According to connected documentation, CVE-2024-53800 affects Rezgo Online Booking (Rezgo plugin) with an Unauthenticated Local File Inclusion (LFI) due to improper control of the filename used in PHP include/require. The Wordfence listing specifies Rezgo Online Booking