CVE-2017-2168 WP Booking System – Booking Calendar < 1.4 - Cross-Site Scripting
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpbookingsystem wp booking system | <= 1.3.3 | No fix listed |
| wpbookingsystem wp booking system | <= 3.6 | No fix listed |
| WP Booking System . WP Booking System Free version | = prior to version 1.4 | No fix listed |
| WP Booking System . WP Booking System Premium version | = prior to version 3.7 | No fix listed |
| wordpress wp-booking-system(WordPress) | < 1.4 | 1.4 |
| wordpress wp-booking-system-premium(WordPress) | < 3.7 | 3.7 |
References
- JVNDB-2017-000092 third-party-advisory vdb-entry
- JVN#96165722 third-party-advisory vdb-entry
- wordpress.org release-notes vendor-advisory
- wpvulndb.com
- Wordfence Intelligence third-party-advisory
- www.cve.org