CVE-2017-2168

2017-05-2216:00:00

jpcert

www.cve.org

0.002 Low

EPSS

Percentile

52.5%

JSON

Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CNA Affected

[
  {
    "product": "WP Booking System Free version",
    "vendor": "WP Booking System",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 1.4"
      }
    ]
  },
  {
    "product": "WP Booking System Premium version",
    "vendor": "WP Booking System",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 3.7"
      }
    ]
  }
]