Skip to content
OpenAdvisories

Product · wpdevart

Booking Calendar Pro WpDevArt

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'

    The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘calendar_id’ parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization …