CVE-2020-9371

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress

published March 4, 2020

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03303 · 88.5th percentile
Published
2020-03-04T18:11Z
EPSS history
Timeline
  • 04 MAR 18:11Z
    Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress
    cvelistv5