Description
The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and executes arbitrary JavaScript when the SVG is opened, including in the session of an administrator who reviews the submitted booking.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Booking calendar, Appointment Booking System | 3.2.18 – ≤ 3.2.36 | — |
References
- https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f83fa7f/ exploit vdb-entry technical-description