7.1
Élevée
CVE-2026-25435 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Stored XSS.This issue affects Booking calendar, Appointment Booking System: from n/a through <= 3.2.36.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Booking calendar, Appointment Booking System 3.2 | premières → 3.2.36 | Pas de correctif indiqué |
Autres CVE de Booking calendar, Appointment Booking System
Les 14 CVE de Booking calendar, Appointment Booking System →
CVE-2026-73395
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking…
6.5
Moyenne
CVE-2026-8840
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization bypass in all…
5.3
Moyenne
CVE-2026-57778
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows…
5.3
Moyenne
CVE-2026-15289
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via…
5.9
Moyenne