Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00174 · Published 2026-03-05 · No fix listed CWE-79
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Object Injection.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 15.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2025-08-20 · No fix listed CWE-502
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00274 · Published 2025-08-20 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Reflected XSS.This issue a…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00276 · Published 2025-07-16 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator: from n/a through <= 7.4.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00232 · Published 2025-07-16 · No fix listed CWE-862
Priority LOW 39
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuanticaLabs GymBase Theme Classes gymbase_classes allows SQL Injection.This issue affects GymBase Theme Classes: from…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2025-07-16 · No fix listed CWE-89
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Pressroom pressroom allows Reflected XSS.This issue affects Pressroom: from n/a through <= 7.0.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0026 · Published 2025-07-04 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Vertical Web Pricing Tables css3_vertical_web_pricing_tables allows Reflected XSS.This issue affects…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00211 · Published 2025-06-27 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in QuanticaLabs Car Park Booking System for WordPress car-park-booking-system-for-wordpress.This issue affects Car Park Booking System for WordPress: from n/a through <= 2.6.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-05-19 · No fix listed CWE-862
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: from n/a through <= 3.0.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00145 · Published 2025-05-16 · No fix listed CWE-352
Priority LOW 24
Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Accordions for WordPress:…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2025-05-16 · No fix listed CWE-862
Priority LOW 24
Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2025-05-16 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MediCenter - Health Medical Cli…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00285 · Published 2025-02-18 · No fix listed CWE-862
Priority LOW 36
Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPre…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00361 · Published 2024-05-17 · No fix listed CWE-862
Priority MEDIUM 50
Unrestricted Upload of File with Dangerous Type vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 7.2.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00631 · Published 2024-03-31 · No fix listed CWE-434
Priority MEDIUM 60
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1915 · Published 2018-02-17 · No fix listed CWE-89