Lucene search
China National Vulnerability DatabaseCNVD-2022-68538HistoryJan 05, 2022 - 12:00 a.m.
WordPress plugin Booking Calendar cross-site scripting vulnerability
2022-01-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.001 Low
EPSS
Percentile
40.2%
WordPress is a set of blogging platform developed using PHP language. A cross-site scripting vulnerability exists in the WordPress plugin Booking Calendar. The vulnerability stems from the program not cleaning and escaping the Booking_type parameter before exporting it back to the administration page. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress booking calendar | lt | 8.9.2 |
Related
nvd
nvd
CVE-2021-25040
2022-01-03 13:15:09
wpvulndb
wpvulndb
Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
2021-12-06 00:00:00
patchstack
patchstack
cve
cve
CVE-2021-25040
2022-01-03 13:15:09
wpexploit
wpexploit
Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
2021-12-06 00:00:00
cvelist
cvelist
CVE-2021-25040 Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
2022-01-03 12:49:18
prion
prion
Cross site scripting
2022-01-03 13:15:00