Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 1.6.7.55 Clear all filters
TI-2024-07301 CVE-2024-7877 · GHSA-hg63-44hg-r9q3

Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS

Priority MEDIUM 55

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Notification settings, which could allow high privilege users such…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0039 Published 2024-11-05 Fixed in 1.6.7.55 CWE-79
TI-2024-07300 CVE-2024-7876 · GHSA-cjrc-86h3-3hxh

Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS

Priority MEDIUM 55

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Appointment Type settings, which could allow high privilege users s…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0039 Published 2024-11-05 Fixed in 1.6.7.55 CWE-79