Advanced Booking Calendar Security Vulnerabilities and Issues — Advanced Booking Calendar CVE List

Lucene search

ElbtideAdvanced Booking Calendar

2 matches found

CVE•added 2021/04/22 9:15 p.m.•39 views

CVE-2021-24232

The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue

5.4CVSS5.2AI score0.00188EPSS

CVE•added 2021/04/12 2:15 p.m.•38 views

CVE-2021-24225

The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue

5.4CVSS5.2AI score0.00162EPSS