| Package | Affected versions | Patched versions |
|---|---|---|
| booking calendar | < 9.7.3.1 | 9.7.3.1 |
The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free