Vulners
Lucene search
2 matches found
Cross site scripting
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabcappointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML...
3.5CVSS5.4AI score0.00738EPSS
Exploits5References5Affected Software1
CVE-2020-9371
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabcappointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML...
5.5AI score0.00738EPSS
Exploits5References5
20