A vulnerability classified as problematic was found in Availability Booking Calendar 5.0. This vulnerability affects unknown code. The manipulation of the argument SMS API Key/Default Country Code leads to basic cross site scripting.

This vulnerability was named CVE-2023-48825. The attack can be initiated remotely. There is no exploit available.