Etoile Web Design

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Etoile Web Design records in CISA KEV

No Etoile Web Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Front End Users 10 records HIGH Ultimate Faq 5 records MEDIUM Ultimate Product Catalog 4 records MEDIUM Order Tracking 3 records LOW Ultimate Reviews 3 records MEDIUM Ultimate Appointment Booking & Scheduling 1 record LOW

Records

1 record in Ultimate Appointment Booking & Scheduling · all components

TI-2020-14874 CVE-2020-24313 · GHSA-26rv-cxmp-hwgh

Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and…

LOW 30

Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01151 Published 2020-08-26 No fix listed CWE-79

Open these records in search →

Critical	4
High	11
Medium	17
Low	0
No CVSS	0