WordPress Plugin Vulnerabilities

Rezgo Online Booking < 1.8.2 - Multiple XSS

Description

The rezgo-online-booking WordPress plugin was affected by a Multiple XSS security vulnerability.

Affects Plugins

Plugin icon
rezgo-online-booking
Fixed in 1.8.2

References

CVE
CVE-2014-4547
URL
https://codevigilant.com/disclosure/wp-plugin-rezgo-online-booking-a3-cross-site-scripting-xss

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
7e5307cb-8d27-4ca9-a293-470c69086b7c

Timeline

Publicly Published
2014-05-28 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-03-24
Title
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
Published
2014-05-28
Title
Rezgo < 2.0.0 - Reflected Cross-Site Scripting
Published
2023-09-27
Title
RSVPMarker < 10.6.7 - Admin+ Stored XSS
Published
2018-11-14
Title
Ninja Forms <= 3.3.17 - Unauthenticated Cross-Site Scripting (XSS)
Published
2025-07-23
Title
WP Get The Table < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter