Skip to content
Threat Feed
Subscribe

Vendor

Crocoblock

1 brief RSS
high advisory

Stored Cross-Site Scripting in JetAppointment Plugin for WordPress

An unauthenticated stored XSS vulnerability in the JetAppointment WordPress plugin allows attackers to inject malicious scripts via the friendlyTime parameter that execute in an administrator's browser context.

JetAppointment xss web-application wordpress cve-2026-93875
1r 2t 1c