CVE-2024-12462

creationtimestamp| type| source ---|---|--- 2025-01-07 05:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi5xuu625 2025-01-07 07:10:09+00:00| seen| https://t.me/cvedetector/14450 2025-01-07 16:37:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/453...

CVE-2024-12462

CVE-2024-12462 – YOGO Booking (WordPress) : The WordPress plugin is vulnerable to a stored cross-site scripting (XSS) via the plugin shortcode yogo-calendar. Affected versions are all up to and including 1.6.2, due to insufficient input sanitization and output escaping on user-supplied attributes...