Vulnerabilities > Wpbookingcalendar > WP Booking Calendar

DATE CVE VULNERABILITY TITLE RISK
2024-08-30 CVE-2024-8274 Cross-site Scripting vulnerability in Wpbookingcalendar WP Booking Calendar
The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timeline_obj' in all versions up to, and including, 10.5 due to insufficient input sanitization and output escaping.
network
low complexity
wpbookingcalendar CWE-79
6.1