Show filters
18 Total Results
Displaying 1-10 of 18
Sort by:
Attacker Value
Unknown

CVE-2023-23895

Disclosure Date: December 09, 2024 (last updated December 21, 2024)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.
0
Attacker Value
Unknown

CVE-2024-50418

Disclosure Date: October 29, 2024 (last updated October 29, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Time Slot Booking Time Slot allows Stored XSS.This issue affects Time Slot: from n/a through 1.3.6.
0
Attacker Value
Unknown

CVE-2024-35735

Disclosure Date: June 10, 2024 (last updated June 13, 2024)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.
Attacker Value
Unknown

CVE-2024-33543

Disclosure Date: June 09, 2024 (last updated November 02, 2024)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.
Attacker Value
Unknown

CVE-2024-35734

Disclosure Date: June 08, 2024 (last updated July 19, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10.
Attacker Value
Unknown

CVE-2022-41790

Disclosure Date: January 17, 2024 (last updated January 25, 2024)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.
Attacker Value
Unknown

CVE-2023-48833

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48828

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48827

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48826

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.