Skip to content
OpenAdvisories

Vendor

solidres

3 known vulnerabilities.

Products

Solidres – Hotel booking plugin for WordPress 1 Joomla Solidres 1 Solidres – Hotel booking plugin 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-54363

    Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

    Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multiple GET parameters including show, reviews, type_id, distance, facilities, categories, prices…

    solidres Joomla Solidres Web / CMS
  • Medium 4.4
    CVE-2023-1374

    Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    solidres Solidres – Hotel booking plugin for WordPress Web / CMS