Appointment Hour Booking does not sanitize Calendar field settings, allowing stored Cross-Site Scripting by high privilege users
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Prion | Cross site scripting | 13 Jun 202213:15 | – | prion |
Cvelist | CVE-2022-1710 Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting | 13 Jun 202212:42 | – | cvelist |
CVE | CVE-2022-1710 | 13 Jun 202213:15 | – | cve |
NVD | CVE-2022-1710 | 13 Jun 202213:15 | – | nvd |
Patchstack | WordPress Appointment Hour Booking plugin <= 1.3.55 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability | 23 May 202200:00 | – | patchstack |
wpexploit | Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting | 23 May 202200:00 | – | wpexploit |
OpenVAS | WordPress Appointment Hour Booking Plugin < 1.3.56 XSS Vulnerability | 11 Aug 202300:00 | – | openvas |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo