Threats tagged 'ghsa-835v-66hv-vq5w'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.4%	CVE-2026-14433Online Booking & Scheduling Calendar by vcita (WordPress plugin) · Cross-site Scripting High7.2EPSS 0.4%2026-08-15CVE Database V5CVE-2026-14433 The Online Booking & Scheduling Calendar plugin for WordPress by vcita is vulnerable to a stored cross-site scripting (XSS) attack via the 'business_id' parameter in all versions up to and including 4.6.0. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. The issue arises from insufficient input sanitization and output escaping. EPSS 0.4%Vulnerability CWE-79 #ghsa-835v-66hv-vq5w	CVE Database V5	2026-08-15

Page 1 of 1