Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Priority LOW 24

Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to inject arbitra…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02041 Published 2015-01-13 No fix listed CWE-79
Priority LOW 24

Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inject arbitrary web scri…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01986 Published 2015-01-09 No fix listed CWE-79