CVE-2021-24712
Description
The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.
CWE
- CWE-79 — CWE-79 Cross-site Scripting (XSS)
Affected
- Unknown / Appointment Hour Booking – WordPress Booking Plugin — v=1.3.17 <1.3.17 [affected]
CVSS
- (none)
References
Source
cvelistV5-main/cves/2021/24xxx/CVE-2021-24712.json