EDB-48204
PoCWordPress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
view exploit source exploit_dbtype webappsauthor Daniel Monzónpublished 2020-03-12catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-9372US | high7.8 | Exploit | ||
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then coul… | ||||
| CVE-2020-9371US | medium4.8 | Exploit | ||
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to injec… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan