Non notée
CVE-2021-24930 The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name…
Description
The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WordPress Online Booking and Scheduling Plugin – Bookly 20.3 | premières → < 20.3.1 | 20.3.1 |