exploitDog

CVE-2018-6891

Опубликовано: 11 фев. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.

Ссылки

https://wordpress.org/plugins/bookly-responsive-appointment-booking-tool/#developers
Release Notes
Third Party Advisory
https://www.gubello.me/blog/bookly-blind-stored-xss/
Exploit
Third Party Advisory
https://wordpress.org/plugins/bookly-responsive-appointment-booking-tool/#developers
Release Notes
Third Party Advisory
https://www.gubello.me/blog/bookly-blind-stored-xss/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:booking-wp-plugin:bookly:*:*:*:*:*:wordpress:*:*

Версия до 14.5 (исключая)

EPSS

Процентиль: 43%

0.0021

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-c633-jhjv-4m97

CVSS3: 6.1

github

больше 3 лет назад

Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.

EPSS

Процентиль: 43%

0.0021

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79