CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-0627 | Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.0.47 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.0.47 | 1.0.47 | 2022-02-23 | — |
The Booking for Appointments and Events Calendar plugin Amelia versions prior to 1.0.47 fails to properly sanitize and escape the code parameter, allowing attackers to inject malicious scripts that execute when displayed on administrator pages, resulting in a reflected cross-site scripting vulnerability.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.