CVEDB API

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 versions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.1%

CVSS Severity

CVSS v3 Score 7.1

References

Products affected by CVE-2023-36384

Booking Calendar Project » Booking Calendar » Version: 0.5

cpe:2.3:a:booking_calendar_project:booking_calendar:0.5
Booking Calendar Project » Booking Calendar » Version: 0.6

cpe:2.3:a:booking_calendar_project:booking_calendar:0.6
Booking Calendar Project » Booking Calendar » Version: 0.7

cpe:2.3:a:booking_calendar_project:booking_calendar:0.7
Booking Calendar Project » Booking Calendar » Version: 1.0

cpe:2.3:a:booking_calendar_project:booking_calendar:1.0
Booking Calendar Project » Booking Calendar » Version: 1.1

cpe:2.3:a:booking_calendar_project:booking_calendar:1.1
Booking Calendar Project » Booking Calendar » Version: 1.2

cpe:2.3:a:booking_calendar_project:booking_calendar:1.2