CVEvulnerability
CVE-2017-2168
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• wpbookingsystem wp booking system (<= 1.3.3)
• wpbookingsystem wp booking system (<= 3.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000092 Third Party Advisory, VDB Entry
- https://jvn.jp/en/jp/JVN96165722/index.html Third Party Advisory, VDB Entry
- https://wordpress.org/plugins/wp-booking-system/#developers Release Notes, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/8830 wpvulndb.com
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000092 Third Party Advisory, VDB Entry
- https://jvn.jp/en/jp/JVN96165722/index.html Third Party Advisory, VDB Entry
- https://wordpress.org/plugins/wp-booking-system/#developers Release Notes, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/8830 wpvulndb.com