QuanticaLabs vulnerabilities

🔔 Create alert RSS

Published CVEs affecting QuanticaLabs products: 2 record(s), with severity, exploitation and fixes.

MediCenter - Health Medical Clinic 1 Car Park Booking System 1

Exploited only (KEV) →

CVE-2017-20243 High · 8.2 CWE-89 Jun 9, 2026

WordPress Car Park Booking Plugin SQL Injection via space_id

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. Attackers can send GET requests to the booking-page endpoint with malicious space_id values using AND SLEEP() payloads to extract sensitive database information.

CVE-2026-28137 High · 7.1 CWE-79 Mar 5, 2026

WordPress MediCenter - Health Medical Clinic WordPress Theme theme <= 14.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.9.