CVE-2026-10148

The Amelia (Booking for Appointments and Events Calendar) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.4.9 . The root cause is insufficient input sanitization and output escaping on the load_manually parameter within the render() methods of...