Booking for Appointments and Events Calendar – Amelia, CVE-2023-27918
- CVE, Research URL
- Published on
- May 10, 2023
- Research Description
- Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.
- Affected versions
-
Min -, max 1.0.76.
- Status
-
vulnerable