Design/Logic Flaw

2018-01-1300:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.9%

An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.

CPENameOperatorVersion
booking_calendareq2.1.7

CPE	Name	Operator	Version
	booking_calendar	eq	2.1.7

References

github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md

wpvulndb.com/vulnerabilities/9012