Vulnerabilities and Security Researches

Booking calendar, Appointment Booking System, CVE-2018-5672

CVE, Research URL: CVE-2018-5672
Home page URL: Security reports for Booking calendar, Appointment Booking System
Application: Booking calendar, Appointment Booking System
Published on: Jan 13, 2018
Research Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
Affected versions: max 2.1.8.
Status: vulnerable