CVE-2024-47360: WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through <= 1.6.20.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47360?
CVE-2024-47360 is classified as a reflected cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-47360?
You should update the Booking Algorithms BA Book Everything plugin to the latest version above 1.6.20 to resolve CVE-2024-47360.
What versions are affected by CVE-2024-47360?
CVE-2024-47360 affects all versions of Booking Algorithms BA Book Everything up to and including 1.6.20.
What are the potential impacts of CVE-2024-47360?
CVE-2024-47360 could allow attackers to execute arbitrary JavaScript in the contexts of other users' browsers, leading to unauthorized actions or data exposure.
Is CVE-2024-47360 specific to certain platforms?
CVE-2024-47360 specifically affects the Booking Algorithms BA Book Everything plugin in both Booking Algorithms and WordPress environments.