Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/01 9:17 a.m.•16 views

CVE-2026-96573

The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer in all versions up to, and including, 1.5.97 due to insufficient input sanitization and output escapin...

7.2CVSS0.00259EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/01 8:28 a.m.•11 views

CVE-2026-96573 Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer

The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer in all versions up to, and including, 1.5.97 due to insufficient input sanitization and output escapin...

7.2CVSS6.1AI score0.00259EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/01 8:28 a.m.•8 views

EUVD-2026-90566

The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer in all versions up to, and including, 1.5.97 due to insufficient input sanitization and output escapin...

7.2CVSS6AI score0.00259EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/01 8:28 a.m.•14 views

CVE-2026-96573

The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) in versions up to and including 1.5.97 . The flaw stems from insufficient input sanitization and output escaping within the Booking Form Single-Line Field via the Sche...

7.2CVSS6.1AI score0.00259EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/01 8:28 a.m.•41 views

CVE-2026-96573 Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer

The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer in all versions up to, and including, 1.5.97 due to insufficient input sanitization and output escapin...

7.2CVSS0.00259EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2012/08/23 8:00 p.m.•34 views

CVE-2011-5109

Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to 1 categorylist.php, 2 Copyofcalendarlist.php, 3 customerstatisticslist.php, 4 customerlist.php, and 5...

7.5AI score0.02042EPSS
SaveExploits2References11
Rows per page
Query Builder