Skip to content
Threat Feed
Subscribe

Vendor

Vcita

1 brief RSS
high advisory

Stored XSS in Online Booking & Scheduling Calendar for WordPress by vcita

A stored cross-site scripting (XSS) vulnerability in the vcita WordPress plugin up to version 4.6.0 allows unauthenticated attackers to inject arbitrary scripts via the 'business_id' parameter.

Online Booking & Scheduling Calendar for WordPress by vcita xss web-vulnerability wordpress
1r 1t 1c