medium6.1
CVE-2023-23012
Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the…
Impact
Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Classroombookings | Classroombookings | Version 2.6.4 |