PT-2024-39161 · WordPress · Wp Simple Booking Calendar

🗓️ 13 Sep 2024 00:00:00Reported by Positive TechnologiesType

WP Simple Booking Calendar up to version 2.0.10 has reflected cross site scripting via unescaped query args.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8663	13 Sep 202409:35	–	circl
CNNVD	WordPress plugin WP Simple Booking Calendar 跨站脚本漏洞	13 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8663	13 Sep 202406:47	–	cve
Cvelist	CVE-2024-8663 WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting	13 Sep 202406:47	–	cvelist
EUVD	EUVD-2024-49333	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8663	13 Sep 202407:15	–	nvd
OSV	CVE-2024-8663	13 Sep 202407:15	–	osv
Patchstack	WordPress WP Simple Booking Calendar Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)	13 Sep 202400:00	–	patchstack
Patchstack	WordPress WP Simple Booking Calendar plugin <= 2.0.10 - Reflected Cross-Site Scripting vulnerability	13 Sep 202406:06	–	patchstack
RedhatCVE	CVE-2024-8663	23 May 202507:20	–	redhatcve

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8663
twitter	www.twitter.com/CVEnew/status/1834491381726810378
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/cad4300f-02f9-4c9f-9bb3-1c9da8b78ac9
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
twitter	www.twitter.com/VulmonFeeds/status/1834550804495114732
plugins	www.plugins.trac.wordpress.org/browser/wp-simple-booking-calendar/tags/2.0.10/includes/modules/update-checker/views/view-register-website.php
t	www.t.me/cvenotify/96372
plugins	www.plugins.trac.wordpress.org/browser/wp-simple-booking-calendar/tags/2.0.10/includes/base/admin/calendar/views/view-edit-calendar.php
t	www.t.me/cvedetector/5556

27 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.1

EPSS0.00415

SSVC