Aller au contenu
Se connecter
Non notée

CVE-2022-1710 The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar…

Description

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Produits et versions touchés

Produit Versions touchées Corrigé en
Appointment Hour Booking – WordPress Booking Plugin 1.3 premières → < 1.3.56 1.3.56

Autres CVE de Appointment Hour Booking – WordPress Booking Plugin

Les 3 CVE de Appointment Hour Booking – WordPress Booking Plugin →
CVE-2021-24712 The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new… Non notée CVE-2021-24673 The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing… Non notée
Suivre cette CVE