Booking Calendar Contact
Approved changes feed: RSS · Atom
cpe:2.3:a:dwbooster:booking_calendar_contact:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dwbooster (68f45f7b-4028-5f7d-8f51-d831b376be86) |
|---|---|
| Product | Booking Calendar Contact (36fac5e4-158c-512d-a5e9-49054428c1d0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-20084 |
vulnerable | 2026-07-28 18:32:21.608106 |
WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS
HIGH (7.2)
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site scripting payloads through the admin.php page parameters. Attackers can inject malicious JavaScript into the 'ict' and 'ics' options or the calendar 'name' parameter via GET requests to execute arbitrary scripts when the calendar is displayed or accessed in the administration interface.
Published: 2026-06-15T12:00:49.912Z
Updated: 2026-07-15T01:23:22.121Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.