CVE-2023-50860

Summary

CVE-2023-50860 is a Cross-site Scripting (XSS) vulnerability affecting the TMS Booking for Appointments and Events Calendar – Amelia version 1.0.85 and below. The issue stems from improper neutralization of user input during web page generation, resulting in stored XSS. An attacker can inject malicious scripts into a web page viewed by other users, potentially stealing sensitive data or taking control of their sessions. This vulnerability poses a significant risk to organizations using the affected software for managing appointments and events.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.