CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS

CVE-2026-40791: Um Slot de Reserva para XSS de Administrador Encontrei um XSS armazenado não autenticado no plugin WordPress WP Time Slots Booking Form. Uma submissão pública de reserva controla parte do valor armazenado do horário slot. O plugin posteriormente imprime esse valor na página de...

WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability

SQL Injection vulnerability discovered by xwii in WordPress Plugin WP Time Slots Booking Form versions = 1.2.50...

WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin WP Time Slots Booking Form versions = 1.2.10...

CVE-2023-23971

Summary: CVE-2023-23971 affects the CodePeople WP Time Slots Booking Form WordPress plugin (versions ≤ 1.1.81). The root cause is an authenticated stored XSS due to insufficient sanitization/escaping in plugin settings, enabling an admin+ user to inject scripts that could be executed by other use...