Appointment Hour Booking – WordPress Booking Plugin, CVE-2021-24673
- CVE, Research URL
- Published on
- Oct 04, 2021
- Research Description
- The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
- Affected versions
-
max 1.3.16.
- Status
-
vulnerable