Description
Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpdevelop | Booking Calendar | version 7.1 and earlier | — |
References
- http://wpbookingcalendar.com/changelog/
- JVN#54762089 third-party-advisory