cleantalk
Vulnerabilities and Security Researches

Booking Ultra Pro Appointments Booking Calendar Plugin, CVE-2024-38676

CVE, Research URL

CVE-2024-38676

Published on
Jul 20, 2024
Research Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13.
Affected versions
max 1.1.13.
Status
vulnerable