Skip to content
Threat Feed
Subscribe

Vendor

NSquared

1 brief RSS
high threat

Stored XSS Vulnerability in Simply Schedule Appointments Plugin

A stored cross-site scripting (XSS) vulnerability (CVE-2026-110382) in the Simply Schedule Appointments WordPress plugin allows unauthenticated or low-privileged users to inject malicious scripts into administrative pages.

exploited Simply Schedule Appointments xss web-vulnerability wordpress cve
1t 1c