CVE-2023-30256

Mô tả

Tham khảo

• packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html
• ahrixia/CVE-2023-30256 · Exploit
• webkul/hotelcommerce · Product
• qloapps.com · Product

Lỗ hổng khác của qloapps

• CVE-2021-41074TRUNG BÌNH 5.4A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML documen…
• CVE-2025-67325NGHIÊM TRỌNG 9.8Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achiev…
• CVE-2025-10759TRUNG BÌNH 5.3A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token Handler. Performing…
• CVE-2025-6173CAO 7.2A vulnerability classified as critical was found in Webkul QloApps 1.6.1. Affected by this vulnerability is an unknown functionality of the …
• CVE-2025-26058TRUNG BÌNH 4.2Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, …