CVE-2023-51520

MEDIO 5.4CVE-2023-51520 · Published 01/02/2024 · updated 17/06/2026

En resumen

CVE-2023-51520 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a booking calendar (wpbookingcalendar).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.33%, mayor que el 26.0% de las vulnerabilidades.
Solución: actualizar a 9.7.4 o posterior.

Package	Affected versions	Patched versions
booking calendar wpbookingcalendar	`< 9.7.4`	`9.7.4`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects WP Booking Calendar: from n/a before 9.7.4.

References

patchstack.com/database/vulnerability/booking/wordpress-booking-calendar-plugin-9-7-4-cross-site-scripting-xss-vulnerability · Third Party Advisory

Más vulnerabilidades de booking calendar

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

booking calendar

wpbookingcalendar

< 9.7.4

9.7.4

Más vulnerabilidades de booking calendar

Ver todo →