VendorsBooking Calendar Projectbooking_calendar2.1.7
Vulnerabilities

Booking Calendar Project Booking Calendar 2.1.7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2018-5673
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.
Published 2018-01-13 · Modified
8.8EPSS 0.008
CVE-2018-5670
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
Published 2018-01-13 · Modified
4.8EPSS 0.006
CVE-2018-5671
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
Published 2018-01-13 · Modified
4.8EPSS 0.006
CVE-2018-5672
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
Published 2018-01-13 · Modified
4.8EPSS 0.006