Booking-Wp-Plugin Bookly
6 CVEs affecting Booking-Wp-Plugin Bookly. Latest disclosed: 2023-11-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4691 | High | 7.2 | 2023-10-16 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL stat… |
CVE-2023-1172 | High | 7.2 | 2023-03-17 | The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient… |
CVE-2018-6891 | Medium | 6.1 | 2018-02-11 | Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js. |
CVE-2021-24930 | Medium | 5.4 | 2021-12-06 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page… |
CVE-2023-5209 | Medium | 4.8 | 2023-11-27 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2023-1159 | Medium | 4.0 | 2023-06-02 | The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient inpu… |