Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting. The plugin does not sanitise and escape the booking_type parameter before outputting it in an admin page, leading to a Reflected Cross-Site Scripting
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Prion | Cross site scripting | 3 Jan 202213:15 | – | prion |
Patchstack | WordPress Booking Calendar plugin <= 8.9.1 - Reflected Cross-Site Scripting (XSS) vulnerability | 6 Dec 202100:00 | – | patchstack |
CNVD | WordPress plugin Booking Calendar cross-site scripting vulnerability | 5 Jan 202200:00 | – | cnvd |
Cvelist | CVE-2021-25040 Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting | 3 Jan 202212:49 | – | cvelist |
wpexploit | Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting | 6 Dec 202100:00 | – | wpexploit |
CVE | CVE-2021-25040 | 3 Jan 202213:15 | – | cve |
NVD | CVE-2021-25040 | 3 Jan 202213:15 | – | nvd |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo