WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

CVE-2023-30748

Summary

The Easy Appointments plugin by Nikola Loncar is susceptible to a Cross-site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. This flaw allows attackers to exploit the application by injecting malicious scripts that can be stored and later executed in the browsers of unsuspecting users. Users of affected versions should be vigilant, as the consequences of this vulnerability can lead to unauthorized access to sensitive user information, session hijacking, and various other malicious activities. Ensuring that the plugin is updated to mitigate this issue is essential for maintaining application security.

References