Security Advisory

CVE-2023-27918

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-10 00:00:00

Last updated 2025-01-27 21:02:42

Assigner jpcert

State PUBLISHED

Description

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.

← Browse all CVEs View on cve.org ↗