CVE-2024-8663

🗓️ 13 Sep 2024 06:47:29Reported by WordfenceType

The WP Simple Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8663	13 Sep 202409:35	–	circl
CNNVD	WordPress plugin WP Simple Booking Calendar 跨站脚本漏洞	13 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8663 WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting	13 Sep 202406:47	–	cvelist
EUVD	EUVD-2024-49333	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8663	13 Sep 202407:15	–	nvd
OSV	CVE-2024-8663	13 Sep 202407:15	–	osv
Patchstack	WordPress WP Simple Booking Calendar Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)	13 Sep 202400:00	–	patchstack
Patchstack	WordPress WP Simple Booking Calendar plugin <= 2.0.10 - Reflected Cross-Site Scripting vulnerability	13 Sep 202406:06	–	patchstack
Positive Technologies	PT-2024-39161 · WordPress · Wp Simple Booking Calendar	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8663	23 May 202507:20	–	redhatcve

NVD

Vulners

Node

wpsimplebookingcalendar wp_simple_booking_calendarRange<2.0.11wordpress

[
  {
    "vendor": "murgroland",
    "product": "WP Simple Booking Calendar",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.0.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-simple-booking-calendar/tags/2.0.10/includes/modules/update-checker/views/view-register-website.php
plugins	www.plugins.trac.wordpress.org/browser/wp-simple-booking-calendar/tags/2.0.10/includes/base/admin/calendar/views/view-edit-calendar.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/cad4300f-02f9-4c9f-9bb3-1c9da8b78ac9

08 Apr 2026 17:23Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.03527

SSVC

CWE-79