WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin VikAppointments Services Booking Calendar versions = 1.2.16...