Show filters
64 Total Results
Displaying 61-64 of 64
Sort by:
Attacker Value
Unknown
CVE-2015-9233
Disclosure Date: September 30, 2017 (last updated November 26, 2024)
The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.
0
Attacker Value
Unknown
CVE-2015-7320
Disclosure Date: September 29, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-7319
Disclosure Date: September 29, 2015 (last updated October 05, 2023)
SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updating the username.
0
Attacker Value
Unknown
CVE-2013-5953
Disclosure Date: March 19, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) calid or (2) paletteDefault parameter in an editevent action to index.php.
0
