← All advisories

Medium severity6.1NVD Advisory· Published Sep 30, 2022· Updated Jun 17, 2026

CVE-2021-36855

CVE-2021-36855

Description

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bookingultrapro/Booking Ultra Pro Appointments Booking Calendar
cpe:2.3:a:bookingultrapro:booking_ultra_pro_appointments_booking_calendar:*:*:*:*:*:wordpress:*:*
Range: <=1.1.4
WordPress/Booking Ultra Prollm-fuzzy
Range: <=1.1.4
Package: https://wordpress.org/plugins/booking-ultra-pro
Booking Ultra Pro/Booking Ultra Pro (WordPress plugin)v5
Range: <= 1.1.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.