Jetmonsters Motopress Appointment Booking vulnerabilities
- jetmonsters motopress appointment bookingMotoPress Appointment Booking <= 2.4.8 - Unauthenticated Stored Cross-Site Scripting via Customer Name via /customers/create REST Endpoint5.4 Medium
- jetmonsters motopress appointment bookingAppointment Booking Lite < 2.4.8 - Unauthenticated Arbitrary Reservation Deletion5.3 Medium
- jetmonsters motopress appointment bookingMotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter5.3 Medium
- jetmonsters motopress appointment bookingMotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter6.5 Medium