Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:simplyscheduleappointments:simply_schedule_appointments:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Stored Cross-Site Scripting in Simply Schedule Appointments WordPress Plugin

The Simply Schedule Appointments WordPress plugin is vulnerable to stored XSS via the 'status' parameter, allowing unauthenticated attackers to execute arbitrary scripts in an administrator's browser session.

Simply Schedule Appointments xss web-vulnerability wordpress cve-2026-104000
2t 1c