E4j S.r.l.

9 CVEs across 4 E4j S.r.l. products. Browse E4j S.r.l. vulnerabilities, severities, and proof-of-concept exploits.

E4j S.r.l. products with known CVEs

ProductCVEs
Vikbooking Hotel Booking Engine & Pms3
Vikbooking Hotel Booking Engine & Pms (WordPress Plugin)2
Vikrentcar2
Vikrentcar Car Rental Management System2
E4j S.r.l. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-39653Critical9.32024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R.L. VikRentCar allows SQL Injection.This issue aff…
CVE-2024-32780Medium5.92024-04-24Exposure of Sensitive Information to an Unauthorized Actor vulnerability in E4J s.R.L. VikRentCar.This issue affects VikRentCar: from n/a through 1.3.2.
CVE-2023-32501Medium4.32023-11-09Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 versions.
CVE-2023-25707Medium6.32023-05-23Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions.
CVE-2023-24396Medium5.92023-04-06Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions.
CVE-2023-23998Medium5.92023-04-06Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plugin <= 1.3.0 versions.
CVE-2022-27863Medium5.32022-04-19Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by gue…
CVE-2022-27862Critical9.82022-04-19Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute da…
CVE-2021-24388Medium5.42021-07-06In the VikRentCar Car Rental Management System WordPress plugin before 1.1.7, there is a custom filed option by which we can manage all the fields that the use…