Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:2F204527-D11B-4B7A-8A57-95DBB8E69D6D
HistoryJul 04, 2019 - 12:00 a.m.

Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS

2019-07-0400:00:00
wpscan.com
6

0.001 Low

EPSS

Percentile

38.0%

JSON

Lack of authorisation check in the cpabc_appointments_save_edition() function can lead to stored XSS via the editionarea parameter when cfwpp_edit is set to ‘js’ or ‘css’

PoC

The payload will be triggered in all pages with a booking form.

CPENameOperatorVersion
appointment-booking-calendarlt1.3.19

Related

cvelist 1
cve 1
nvd 1
wpexploit 1
prion 1
cvelist
cvelist
CVE-2019-14791
2019-08-09 13:32:47
cve
cve
CVE-2019-14791
2019-08-09 14:15:11
nvd
nvd
CVE-2019-14791
2019-08-09 14:15:11
wpexploit
wpexploit
Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS
2019-07-04 00:00:00
prion
prion
Design/Logic Flaw
2019-08-09 14:15:00

0.001 Low

EPSS

Percentile

38.0%

JSON
Related for WPVDB-ID:2F204527-D11B-4B7A-8A57-95DBB8E69D6D
cvelist1cve1nvd1wpexploit1prion1