Security Advisory

CVE-2023-4620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-16 08:32:45

Last updated 2025-05-02 17:39:12

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators

← Browse all CVEs View on cve.org ↗