WordPress WP Time Slots Booking Form Plugin跨站脚本漏洞

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Time Slots Booking Form Plugin prior to 1.1.63. The vulnerability stems from the plugin’s failure to clean and escape calendar names, and can be exploited by attackers to execute client-side JavaScript code.