Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j4pf-2mmw-4h4r

Опубликовано: 10 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.

EPSS

Процентиль: 49%
0.00258
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 2 лет назад

Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.

EPSS

Процентиль: 49%
0.00258
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79