rezgo vulnerabilities

Products

• rezgo online booking 2
• online booking 1
• Rezgo 1

Latest rezgo CVEs

Newest publication first

1. CVE-2024-53800 WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability

   Published 2025-01-07

   High·CVSS 8.1 EPSS 0.70%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in rezgo Rezgo rezgo allows PHP Local File Inclusion.This issue affects Rezgo: from n/a through <= 4.17.

2. CVE-2022-1932 Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting

   Published 2022-08-22

   Medium·CVSS 6.1 EPSS 0.67%

   The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file

3. CVE-2014-4547 Rezgo Online Booking < 1.8.2 - Cross-Site Scripting

   Published 2014-07-02

   Medium·CVSS 4.3 EPSS 1.6%

   Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.