CVE-2025-22719

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...

CVE-2025-22719

CVE-2025-22719 is a Stored XSS in VikAppointments Services Booking Calendar (E4J s.r.l.) across VikAppointments versions up to 1.2.16 (no details beyond that). Public sources (Red Hat, ENISA EUVD, Patchstack) describe it as Improper Neutralization of Input During Web Page Generation (XSS) with CV...

CVE-2025-22719 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...