317 matches found
CVE-2025-48231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Booking Calendar Contact Form booking-calendar-contact-form allows Stored XSS.This issue affects Booking Calendar Contact Form: from n/a through = 1.2.58...
CVE-2025-48231
CVE-2025-48231 concerns a Stored XSS in the WordPress plugin Booking Calendar Contact Form (versions up to 1.2.58). The issue arises from improper input handling during web page generation. Affected: Booking Calendar Contact Form plugin (
CVE-2025-48231: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Booking Calendar Contact Form booking-calendar-contact-form allows Stored XSS.This issue affects Booking Calendar Contact Form: from n/a through = 1.2.58...
PT-2025-27916 · Codepeople · Codepeople Booking Calendar Contact Form
Name of the Vulnerable Software and Affected Versions: codepeople Booking Calendar Contact Form versions 1.2.58 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means tha...
CVE-2025-50025: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Stored XSS.This issue affects CP Polls: from n/a through = 1.0.81...
PT-2025-26382 · Codepeople · Cp-Polls
Name of the Vulnerable Software and Affected Versions: codepeople CP Polls versions 1.0.0 through 1.0.81 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
CVE-2025-49332
Cross-Site Request Forgery CSRF vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through = 1.2.30...
CVE-2025-49291: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through = 5.3.58...
PT-2025-24254 · WordPress · Codepeople Wp Time Slots Booking Form
Name of the Vulnerable Software and Affected Versions: codepeople WP Time Slots Booking Form versions 1.2.30 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the codepeople WP Time Slots Booking Form, allowing unauthorized actions to be performed on behalf of a user withou...
CVE-2025-24727
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through = 1.3.52...
CVE-2025-24723
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Booking Calendar Contact Form booking-calendar-contact-form allows Stored XSS.This issue affects Booking Calendar Contact Form: from n/a through = 1.2.55...
CVE-2024-24873
: Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP Polls: from n/a through 1.0.71...
CVE-2024-24874
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71...
CVE-2024-32720
Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...
CVE-2024-31302
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...
CVE-2024-31941
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3...
CVE-2024-35735
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...
CVE-2023-26521
Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104...