← CVE Intelligence

CVE-2021-24930

Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / WordPress Online Booking and Scheduling Plugin – Booklyaffected 20.3.1 before 20.3.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.