Read the docs

codepeople

Records130All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

codepeople records in CISA KEV

No codepeople vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Calculated Fields Form 13 records MEDIUM Appointment Booking Calendar 11 records HIGH Contact Form Email 10 records MEDIUM Wp Time Slots Booking Form 7 records MEDIUM Polls Cp 5 records MEDIUM Cp Contact Form With Paypal 4 records MEDIUM Booking Calendar Contact Form 2 records MEDIUM Form Builder Cp 2 records LOW

Records

7 records in Wp Time Slots Booking Form · all components

TI-2023-09694 CVE-2023-23895 · GHSA-pj62-g697-6g5q

WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability

Priority LOW 33

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00711 Published 2024-12-09 No fix listed CWE-862
TI-2024-23603 CVE-2024-35734 · GHSA-gmp9-h8j4-2m6g

WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-06-08 No fix listed CWE-79
TI-2022-00314 CVE-2022-0389 · GHSA-jcqp-7rgj-g3f6

WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-03-07 Fixed in 1.1.63 CWE-79
Open these records in search →