CVE-2018-6891

概要

参考情報

• wordpress.org/plugins/bookly-responsive-appointment-booking-tool · Release Notes
• gubello.me/blog/bookly-blind-stored-xss · Exploit

bookly のその他の脆弱性

• CVE-2023-5209中 4.8The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which cou…
• CVE-2023-4691高 7.2The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before usi…
• CVE-2023-1159中 4.8The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due t…
• CVE-2023-1172中 6.1The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 …
• CVE-2021-24930中 5.4The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputtin…