Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2019-20210
Disclosure Date: January 13, 2020 (last updated February 21, 2025)
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
0
Attacker Value
Unknown
CVE-2019-20212
Disclosure Date: January 13, 2020 (last updated February 21, 2025)
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
0
Attacker Value
Unknown
CVE-2019-20211
Disclosure Date: January 13, 2020 (last updated February 21, 2025)
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website.
0
Attacker Value
Unknown
CVE-2019-20209
Disclosure Date: June 19, 2019 (last updated February 21, 2025)
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.
0
