CVE Database /
CVE-2024-1484
CVE · Medium
CVE-2024-1484 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.0.99
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1484
|
Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.0.99 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 1.0.99
|
1.0.99 |
2024-02-29 |
—
|
CVE-2024-1484
The Amelia booking and appointment calendar plugin contained a cross-site scripting vulnerability discovered by Muhammad Hassham Nagori that affected versions prior to 1.0.99. An attacker could exploit this flaw to inject malicious scripts into the website, enabling them to execute arbitrary code such as redirects, advertisements, or other HTML content when visitors access the site. The vulnerability was resolved in version 1.0.99 and users should upgrade to this version or newer to eliminate the risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings