Booking calendar, Appointment Booking System, CVE-2018-5670

CVE, Research URL: CVE-2018-5670
Home page URL: Security reports for Booking calendar, Appointment Booking System
Application: Booking calendar, Appointment Booking System
Published on: Jan 13, 2018
Research Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
Affected versions: max 2.1.8.
Status: vulnerable