CVE-2023-4620 (published 2023-10-16T08:32:45.562Z)
The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators
Affected products: Vendor: Unknown
Product: Booking Calendar
Versions: 0