CVE-2023-36384: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 versions.

PriorityP423medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.35%

27.0th percentile

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 versions.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
booking_calendar_project	booking_calendar	<= 1.2.40	—
codepeople	booking_calendar_contact_form	n/a – 1.2.40	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.