CVE-2023-38384

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Syntactics, Inc. EaSYNC plugin = 1.3.7 versions...

CVE-2023-38384 WordPress eaSYNC Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Syntactics, Inc. EaSYNC plugin = 1.3.7 versions...

CVE-2023-38384

CVE-2023-38384 is an unauthenticated reflected XSS in the WordPress EaSYNC Booking plugin (EaSYNC) up to version 1.3.7. Root cause per sources is improper input handling leading to XSS when user-controlled data is reflected in the page. Affected product: EaSYNC WordPress plugin for booking. Impac...

WordPress eaSYNC Plugin <= 1.3.11 is vulnerable to Cross Site Scripting (XSS)

Software eaSYNC Type Plugin Vulnerable versions = 1.3.11 Fixed in 1.3.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-38384 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 53f8bac4a479 Credits OZ1NG TOOR, LISA Require...