Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102822
HistoryNov 13, 2021 - 12:00 a.m.

WordPress Appointment Booking Calendar System Plugin Cross-Site Scripting Vulnerability

2021-11-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
appointment booking
calendar
cross-site scripting
vulnerability
php
mysql
data validation
javascript

EPSS

0.002

Percentile

55.6%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System plugin in versions prior to 1.5.11 has a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.002

Percentile

55.6%