Lucene search
PRIOn knowledge basePRION:CVE-2020-24313HistoryAug 26, 2020 - 1:15 p.m.
Cross site scripting
2020-08-2613:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
32.7%
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the “Appointment_ID” GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate_appointment_booking_\\&_scheduling | le | 1.1.9 |
Related
wpvulndb
wpvulndb
wpexploit
wpexploit
cve
cve
CVE-2020-24313
2020-08-26 13:15:10
cvelist
cvelist
CVE-2020-24313
2020-08-26 12:54:33
nvd
nvd
CVE-2020-24313
2020-08-26 13:15:10