Lucene search

K
wpvulndbWpvulndbWPVDB-ID:14167153-38B7-4C5D-A03F-A1626EF5EF6D
HistoryAug 10, 2020 - 12:00 a.m.

Ultimate Appointment Booking & Scheduling < 1.1.10 - Authenticated Cross-Site Scripting (XSS)

2020-08-1000:00:00
wpscan.com
8

0.001 Low

EPSS

Percentile

32.7%

The Ultimate Appointment Booking & Scheduling WordPress plugin, versions 1.1.9 and older, were vulnerable to Authenticated Cross-Site Scripting (XSS) within multiple parameters.

PoC

http://www.example.com/wp-admin/admin.php?page=EWD-UASP-options&amp;Action;=EWD_UASP_AppointmentDetails&amp;Selected;=Appointment&amp;Appointment;_ID=1">

0.001 Low

EPSS

Percentile

32.7%

Related for WPVDB-ID:14167153-38B7-4C5D-A03F-A1626EF5EF6D