Thème WordPress
Vulnérabilités CityBook – Directory & Listing WordPress Theme
Cette page rassemble les failles publiées pour CityBook – Directory & Listing WordPress Theme, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CityBook – Directory & Listing WordPress Theme
5 fiches
CityBook <= 2.4.3 – Reflected Cross-Site Scripting
The CityBook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'distance', 'address_lat', and 'address_lng' parameters in versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.4.3
2.4.4
17/06/2020
CTHthemes CityBook < 2.3.4, TownHub < 1.0.6, EasyBook < 1.2.2 Themes – Authenticated Post Deleition via IDOR
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow unspecified authenticated users to delete any page/post/listing via insecure Direct Object Reference (IDOR).
[*, 2.3.4)
2.3.4
27/12/2019
CTHthemes CityBook Theme < 2.3.4, TownHub Theme < 1.0.6, EasyBook Theme < 1.2.2 – Cross-Site Scripting
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
[*, 2.3.4)
2.3.4
27/12/2019
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 – Stored Cross-Site Scripting
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude,…
*-2.3.3
2.3.4
27/12/2019
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 – Stored Cross-Site Scripting
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
*-2.3.3
2.3.4
27/12/2019
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.