CVE-2026-105258

The Appointment Booking Plugin for WordPress (versions before 5.7.6 ) is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape several booking-form step content settings before rendering them on the public booking form. This allows high-privilege users, s...