Unrated severityNVD Advisory· Published Mar 7, 2022· Updated Aug 2, 2024
WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting
CVE-2022-0389
Description
The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected products
1- Range: 1.1.63
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/788ead78-9aa2-49a3-b191-12114be8270bmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.