CVE-2023-4691

概要

参考情報

• wpscan.com/vulnerability/5085ec75-0795-4004-955d-e71b3d2c26c6 · Exploit

bookly のその他の脆弱性

• CVE-2023-5209中 4.8The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which cou…
• CVE-2023-1159中 4.8The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due t…
• CVE-2023-1172中 6.1The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 …
• CVE-2021-24930中 5.4The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputtin…
• CVE-2018-6891中 6.1Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.