TMS-Outsource Amelia

WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

Amelia < 1.0.46 - Manager+ RCE

WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Amelia < 1.0.46 - Reflected Cross-Site Scripting

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.

Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update

Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure

Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure

Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF