Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-05-10T00:00:00

Updated: 2024-08-02T12:23:30.199Z

Reserved: 2023-03-15T00:00:00

Link: CVE-2023-27918

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-05-10T06:15:14.547

Modified: 2024-11-21T07:53:41.867

Link: CVE-2023-27918

cve-icon Redhat

No data.