WordPress Plugin Vulnerabilities

Simpel Reserveren 3 <= 3.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Description

The simpel-reserveren WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
simpel-reserveren
No known fix

References

CVE
CVE-2016-1000149
URL
http://www.vapidlabs.com/wp/wp_advisory.php?v=474
URL
https://www.openwall.com/lists/oss-security/2016/04/12/8

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6accbc5b-ebc4-4718-ae11-b7155a64f244

Timeline

Publicly Published
2016-04-12 (about 10 years ago)
Added
2016-04-19 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-06-11
Title
WordPress < 5.4.2 - Open Redirection
Published
2025-10-06
Title
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-12-30
Title
JetTabs < 2.2.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-04-22
Title
MPL-Publisher < 2.18.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-03-02
Title
Blocksy < 2.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields