B0Ug

Name of the Vulnerable Software and Affected Versions: Booking Calendar plugin version 8.4.3 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `booking id` parameter. Recommendations: For Booking Calendar plugin version 8.4.3, update to a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: wunderfarm WF Cookie Consent plugin version 1.1.3 Description: A persistent cross-site scripting issue has been identified in the web interface of the plugin, allowing the execution of arbitrary HTML/script code in a victim's web browser via a page title. Recommendations: For version 1.1.3, update to a newer version that contains a fix for this issue, as using outdated versions may pose a risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Catapult UK Cookie Consent plugin versions prior to 2.3.10 Description: A persistent cross-site scripting issue has been identified in the web interface of the Catapult UK Cookie Consent plugin for WordPress, allowing the execution of arbitrary HTML/script code in the context of a victim's browser. Recommendations: For versions prior to 2.3.10, update to version 2.3.10 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Responsive Cookie Consent plugin versions prior to 1.8 Description: The issue is related to the mishandling of number fields, which leads to a potential XSS problem. Recommendations: For versions prior to 1.8, update to version 1.8 or later to resolve the issue.