CVE-2021-24232 – The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license …

Vuln ID: CVE-2021-24232

Published:  2021-04-22  21:15:09Z

Description: The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):