medium4.3
CVE-2014-4584
Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inje…
Impact
Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the fID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp-Easybooking Plugin Project | Wp-Easybooking | through 1.0.3 |