Advisories · Technology
Webkul QloApps.
Every CVE that names Webkul QloApps among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
QloApps through 1.7.0 IDOR via OrderDetailController Refund Request
- Webkul QloApps
- Broken access control
- CVSS 5.3 Medium
QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips
- Webkul QloApps
- Broken access control
- CVSS 5.3 Medium
QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creation
- Webkul QloApps
- Broken access control
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX Handlers
- Webkul QloApps
- Broken access control
- CVSS 5.3 Medium
QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room Booking
- Webkul QloApps
- Broken access control
- CVSS 5.3 Medium
QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms
- Webkul QloApps
- Broken access control
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Length of Stay Fields
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Room Type Editor
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via exceptions field
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 7.1 High
QloApps through 1.7.0 Arbitrary File Read via getEmailHTML
- webkul qloapps
- Path traversal
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
QloApps through 1.7.0 Reflected XSS via List Filter Parameters
- Webkul QloApps
- Cross-site scripting (XSS)
- CVSS 8.6 High
Webkul QloApps SQL injection
- Webkul QloApps
- SQL injection
- CVSS 8.6 High
Webkul QloApps SQL injection
- Webkul QloApps
- SQL injection
- CVSS 8.6 High
Webkul QloApps improper file upload validation
- Webkul QloApps
- Unrestricted file upload
- CVSS 6.9 Medium
Webkul QloApps CSRF Token authorization
- Webkul QloApps
- Broken access control
- CVSS 5.1 Medium
Webkul QloApps ajax_products_list.php sql injection
- Webkul QloApps
- Other injection
- SQL injection
- CVSS 5.3 Medium
Webkul QloApps Your Location Search stores cross site scripting
- Webkul QloApps
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Webkul QloApps URL mylogout cross-site request forgery
- Webkul QloApps
- Cross-site request forgery (CSRF)
- Broken access control