CVE-2018-6891

Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-02-11

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Bookly (Booking-wp-plugin)

References

• https://wordpress.org/plugins/bookly-responsive-appointment-booking-tool/#developers
• https://www.gubello.me/blog/bookly-blind-stored-xss/