4 matches found
CVE-2024-12077
creationtimestamp| type| source ---|---|--- 2025-01-07 07:25:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113785878731395996 2025-01-07 07:36:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/364 2025-01-07 08:15:53+00:00| seen|...
CVE-2024-12077 Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘calendarid’ parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it...
CVE-2024-12077
CVE-2024-12077 corresponds to a reflected Cross-Site Scripting vulnerability in the Booking Calendar and Booking Calendar Pro WordPress plugins. The issue is triggered via the calendar_id parameter in all versions up to 3.2.19 (Booking Calendar) and 11.2.19 (Booking Calendar Pro), caused by insuf...
CVE-2024-12077 Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘calendarid’ parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it...