CVE-2020-9371

CVE-2020-9371

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML.

Source: CVE-2020-9371

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다