CVE-2019-14791

The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:codepeople:appointment_booking_calendar:1.3.18:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2019-08-09 14:15

Updated : 2024-02-28 17:08


NVD link : CVE-2019-14791

Mitre link : CVE-2019-14791

CVE.ORG link : CVE-2019-14791


JSON object : View

Products Affected

codepeople

  • appointment_booking_calendar
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')