Skip to content
Threat Feed
Subscribe

Product

Appointment Hour Booking – Booking Calendar (<= 1.5.97)

1 brief RSS
high advisory

Stored DOM-Based XSS in Appointment Hour Booking Plugin

The Appointment Hour Booking plugin for WordPress is vulnerable to Stored DOM-based XSS via the Schedule Calendar List Renderer due to insufficient input sanitization, allowing unauthenticated attackers to execute arbitrary scripts.

Appointment Hour Booking – Booking Calendar web-vulnerability xss wordpress
1t 1c