deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20830
Published: 2023-09-04
Description: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20831
Published: 2023-09-04
Description: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20832
Published: 2023-09-04
Description: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20833
Published: 2023-09-04
Description: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20834
Published: 2023-09-04
Description: In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID: ALPS07608514.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-416, CWE-362, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20835
Published: 2023-09-04
Description: In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-416, CWE-362, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20836
Published: 2023-09-04
Description: In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20837
Published: 2023-09-04
Description: In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20838
Published: 2023-09-04
Description: In imgsys, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326418.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20839
Published: 2023-09-04
Description: In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326409.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20840
Published: 2023-09-04
Description: In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326430; Issue ID: ALPS07326430.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20841
Published: 2023-09-04
Description: In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326441.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20842
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354259; Issue ID: ALPS07340477.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20843
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340119; Issue ID: ALPS07340119.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20844
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354058; Issue ID: ALPS07340121.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20845
Published: 2023-09-04
Description: In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07197795; Issue ID: ALPS07340357.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20846
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354023; Issue ID: ALPS07340098.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20847
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354025; Issue ID: ALPS07340108.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20848
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340433.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20849
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20850
Published: 2023-09-04
Description: In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340381.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-20851
Published: 2023-09-04
Description: In stc, there is a possible out of bounds read due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08048635; Issue ID: ALPS08048635.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32805
Published: 2023-09-04
Description: In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08102892; Issue ID: ALPS08102892.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32806
Published: 2023-09-04
Description: In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32807
Published: 2023-09-04
Description: In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32808
Published: 2023-09-04
Description: In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07849751; Issue ID: ALPS07849751.
CVSS Score: 4.4 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32809
Published: 2023-09-04
Description: In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07849753; Issue ID: ALPS07849753.
CVSS Score: 4.4 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32810
Published: 2023-09-04
Description: In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32811
Published: 2023-09-04
Description: In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-20, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32812
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32813
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017370; Issue ID: ALPS08017370.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32814
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08031947; Issue ID: ALPS08031947.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32815
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08037801; Issue ID: ALPS08037801.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32816
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044032.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-32817
Published: 2023-09-04
Description: In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044035.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2023; https://corp.mediatek.com/product-security-bulletin/September-2023
CVE: CVE-2023-4613
Published: 2023-09-04
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://lgsecurity.lge.com/bulletins/idproducts#updateDetails; https://www.zerodayinitiative.com/advisories/ZDI-23-1221/; https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE: CVE-2023-4754
Published: 2023-09-04
Description: Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/7e2e92feb1b30fac1d659f6620d743b5a188ffe0; https://huntr.dev/bounties/b7ed24ad-7d0b-40b7-8f4d-3c18a906620c; https://github.com/gpac/gpac/commit/7e2e92feb1b30fac1d659f6620d743b5a188ffe0
CVE: CVE-2023-4756
Published: 2023-09-04
Description: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://github.com/gpac/gpac/commit/6914d016e2b540bac2c471c4aea156ddef8e8e01; https://huntr.dev/bounties/2342da0e-f097-4ce7-bfdc-3ec0ba446e05; https://github.com/gpac/gpac/commit/6914d016e2b540bac2c471c4aea156ddef8e8e01
CVE: CVE-2023-25465
Published: 2023-09-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-tell-a-friend-popup-form/wordpress-wp-tell-a-friend-popup-form-plugin-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-tell-a-friend-popup-form/wordpress-wp-tell-a-friend-popup-form-plugin-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-36382
Published: 2023-09-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 2.0.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-media-library-categories/wordpress-media-library-categories-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-media-library-categories/wordpress-media-library-categories-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-39162
Published: 2023-09-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/woo-confirmation-email/wordpress-user-email-verification-for-woocommerce-plugin-3-5-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-confirmation-email/wordpress-user-email-verification-for-woocommerce-plugin-3-5-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-39164
Published: 2023-09-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin <= 4.6.19 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/molongui-authorship/wordpress-molongui-plugin-4-6-18-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/molongui-authorship/wordpress-molongui-plugin-4-6-18-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-30494
Published: 2023-09-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.10 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/imagerecycle-pdf-image-compression/wordpress-imagerecycle-pdf-image-compression-plugin-3-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/imagerecycle-pdf-image-compression/wordpress-imagerecycle-pdf-image-compression-plugin-3-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-31220
Published: 2023-09-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-categories-widget/wordpress-wp-categories-widget-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-categories-widget/wordpress-wp-categories-widget-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-37393
Published: 2023-09-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-39918
Published: 2023-09-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/booking-package/wordpress-booking-package-plugin-1-6-01-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/booking-package/wordpress-booking-package-plugin-1-6-01-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve