Beveiligingsadvies

CVE-2020-24313

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-08-26 12:54:33

Laatst bijgewerkt 2024-08-04 15:12:08

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.

← Alle CVE's bekijken Bekijk op cve.org ↗