TI-2024-10998 CVE-2024-11855 · GHSA-c57q-gwwj-4953
Cross-site scripting in Koalendar – Easy Appointment Scheduling & Booking Plugin
Priority LOW 29
The Koalendar – Events & Appointments Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.0.2 due to insufficient input sa…