cleantalk
Vulnerabilities and Security Researches

Booking for Appointments and Events Calendar – Amelia, CVE-2022-0627

CVE, Research URL

CVE-2022-0627

Published on
Mar 22, 2022
Research Description
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Affected versions
Min -, max 1.0.47.
Status
vulnerable