Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2018-5672
Disclosure Date: January 13, 2018 (last updated November 26, 2024)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
0
Attacker Value
Unknown
CVE-2018-5671
Disclosure Date: January 13, 2018 (last updated November 26, 2024)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
0
Attacker Value
Unknown
CVE-2018-5673
Disclosure Date: January 13, 2018 (last updated November 26, 2024)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.
0
Attacker Value
Unknown
CVE-2018-5670
Disclosure Date: January 13, 2018 (last updated November 26, 2024)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
0