CVE-2024-13431 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the accentcolor and background parameter in all versions up to, and including, 1.6.8.3 due to insufficient input sanitization and output escaping...

WordPress plugin Appointment Booking Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-25099

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accreteinfosolution Appointment Buddy Widget appointment-buddy-online-appointment-booking-by-accrete allows Cross-Site Scripting XSS.This issue affects Appointment Buddy Widget: from n/a through =...

CVE-2025-23526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SwiftCloud Swift Calendar Online Appointment Scheduling online-appointment-scheduling-software allows Reflected XSS.This issue affects Swift Calendar Online Appointment Scheduling: from n/a through...

CVE-2025-27263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27264

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27264

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-25099

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accreteinfosolution Appointment Buddy Widget appointment-buddy-online-appointment-booking-by-accrete allows Cross-Site Scripting XSS.This issue affects Appointment Buddy Widget: from n/a through =...

CVE-2025-23526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Swift Calendar Online Appointment Scheduling allows Reflected XSS. This issue affects Swift Calendar Online Appointment Scheduling: from n/a through 1.3.3...

CVE-2025-23526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SwiftCloud Swift Calendar Online Appointment Scheduling online-appointment-scheduling-software allows Reflected XSS.This issue affects Swift Calendar Online Appointment Scheduling: from n/a through...

CVE-2025-27264 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27263 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27263

CVE-2025-27263 covers a SQL Injection in WordPress plugin Doctor Appointment Booking (NotFound Doctor Appointment Booking). Affected: Doctor Appointment Booking versions n/a through 1.0.0. Root cause: improper neutralization of input in SQL commands. Impact: confidentiality impact High (as per CV...

CVE-2025-27264

CVE-2025-27264 corresponds to a WordPress plugin issue in NotFound Doctor Appointment Booking (WordPress Doctor Appointment Booking) that enables Local File Inclusion via PHP Include/Require. The CVE entry cites affected versions from n/a through 1.0.0. CIRCL and Red Hat CVE references further sp...

CVE-2025-27263 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27264 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-25099 WordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accreteinfosolution Appointment Buddy Widget allows Reflected XSS. This issue affects Appointment Buddy Widget: from n/a through 1.2...

CVE-2025-25099

CVE-2025-25099 is a reflected Cross‑Site Scripting vulnerability in the Appointment Buddy Widget by Accrete for WordPress, affecting versions up to 1.2. The issue results from improper neutralization of user input during web page generation, enabling reflected XSS. Public exploitation details are...

CVE-2025-25099 WordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accreteinfosolution Appointment Buddy Widget appointment-buddy-online-appointment-booking-by-accrete allows Cross-Site Scripting XSS.This issue affects Appointment Buddy Widget: from n/a through =...