CVE-2020-24313
26.08.2020, 13:15
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
| Vendor | Product | Version |
|---|---|---|
| etoilewebdesign | ultimate_appointment_booking_\&_scheduling | 𝑥 ≤ 1.1.9 |
𝑥
= Vulnerable software versions