Skip to main content

Booking Calendar Contact

1 CVEs product

Monthly

CVE-2016-20084 Jun 15, 12:00 MEDIUM POC This Month

WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress XSS Privilege Escalation Booking Calendar Contact +1
NVD Exploit-DB
CVSS 4.0
5.1
EPSS
0.2%
EPSS 0% CVSS 5.1
MEDIUM POC This Month

WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress XSS +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy