CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-38676

WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Status: Published
Published: 2024-07-20
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Booking Ultra Pro Booking Ultra Pro

Default version status: unaffected

n/a to ≤ 1.1.13affected

References

https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve ↗