Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Etoilewebdesign Subscribe
Filtered by product Ultimate Appointment Booking \& Scheduling
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-24313 1 Etoilewebdesign 1 Ultimate Appointment Booking \& Scheduling 2020-09-03 4.3 MEDIUM 6.1 MEDIUM
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.