CVE-2023-2705

MEDIO 6.1CVE-2023-2705 · Published 11/09/2023 · updated 17/06/2026

En resumen

CVE-2023-2705 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a gappointments (gappointments).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.46%, mayor que el 39.9% de las vulnerabilidades.
Solución: actualizar a 1.10.0 o posterior.

Package	Affected versions	Patched versions
gappointments gappointments	`< 1.10.0`	`1.10.0`

Description

The gAppointments WordPress plugin before 1.10.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin

References

wpscan.com/vulnerability/0b3c83ad-d490-4ca3-8589-39163ea5e24b · Exploit

Más vulnerabilidades de gappointments

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free