CVE-2023-36384 Unauth

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Booking Calendar Contact Form 1.2	premières → 1.2.40	Pas de correctif indiqué

Autres CVE de Booking Calendar Contact Form

Les 6 CVE de Booking Calendar Contact Form →

CVE-2026-6810 The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… 5.3 Moyenne CVE-2025-13318 The Booking Calendar Contact Form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and… 5.3 Moyenne CVE-2025-48231 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking… 6.5 Moyenne CVE-2025-24723 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking… 5.9 Moyenne