Vulnerabilities and Security Researches

WP Booking Calendar, CVE-2021-25040

CVE, Research URL: CVE-2021-25040
Home page URL: Security reports for WP Booking Calendar
Application: WP Booking Calendar
Published on: Jan 03, 2022
Research Description: The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Affected versions: max 8.9.2.
Status: vulnerable