← CVE Intelligence

CVE-2023-4620

Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators

Affected (CNA)

Vendor / productVersions
Unknown / Booking Calendaraffected 0 before 9.7.3.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.