CVE-2019-5972

Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2019-07-05

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Online Lesson Booking (Sukimalab)
• Online Lesson Booking (Sukimalab.com)

References

• https://jvn.jp/en/jp/JVN96988995/index.html
• https://olbsys.com/fixed-vulnerability-issue/
• https://wordpress.org/plugins/online-lesson-booking-system/#developers
• https://wpvulndb.com/vulnerabilities/9435