2 matches found
Cross site scripting
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabcappointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML...
3.5CVSS5.4AI score0.03591EPSS
SaveExploits5References5Affected Software1
CVE-2020-9371
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabcappointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML...
5.5AI score0.03591EPSS
SaveExploits5References5
20