Unknown Appointment Hour Booking – Wordpress Booking Plugin vulnerabilities

3 vulnerabilities

Known vulnerabilities in Unknown Appointment Hour Booking – Wordpress Booking Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-24673dwboosterappointment_hour_booking+2
EPSS score
0.62%
The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.6.4CVE-2021-24712dwboosterappointment_hour_booking+2
EPSS score
0.62%
The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.4.8CVE-2022-1710dwboosterappointment_hour_booking+2
EPSS score
0.59%
The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.