The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email1...
6.1CVSS5.9AI score0.01376EPSS
SaveExploits2References1
NVD•added 2003/06/09 4:0 a.m.•14 views
CVE-2003-0307
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field...