CVE-2021-24930
Assigner: WPScan
Published: 2021-12-06T15:55:32
State: PUBLISHED
affected: product: WordPress Online Booking and Scheduling Plugin – Bookly
vendor: Unknown
versions: lessThan: 20.3.1
status: affected
version: 20.3.1
versionType: custom
credits: value: Mesut Cetin
descriptions: value: The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting
x_generator: WPScan CVE Generator