CVE-2024-12469

The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘status’ parameter in all versions up to, and including, 4.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2024-12469

creationtimestamp| type| source ---|---|--- 2024-12-17 09:31:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113667467509014864 2024-12-17 09:35:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113667480613404199 2024-12-17 10:10:08+00:00| seen|...

CVE-2024-12469

CVE-2024-12469 affects the WP BASE Booking of Appointments, Services and Events WordPress plugin. It is a Reflected Cross-Site Scripting vulnerability via the status parameter, caused by insufficient input sanitization/output escaping, exploitable by unauthenticated attackers who lure a user into...