Roomcloud < 1.3 - Cross-Site Scripting
highMultiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) pin, (2) start_day, (3) start_month, (4) start_year, (5) end_day, (6) end_month, (7) end_year, (8) lang, (9) adults, or (10) chi...
- CVSS:
- 7.2
- Affected:
- up to 1.3
- Fixed in:
- 1.3
- Disclosed:
- May 9, 2015