CVE-2022-0834

Affected software: Amelia WordPress plugin up to version 1.0.46. Root cause: insufficient escaping/sanitization of the lastName parameter in AddCustomerController.php, enabling Cross-Site Scripting. Impact: attackers can inject arbitrary scripts that run when users view the booking calendar for a...