Launchpad.net

CVE 2016-10908

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

See the CVE page on Mitre.org for more details.

References