Appointment Hour Booking Security Vulnerabilities and Issues — Appointment Hour Booking CVE List

DwboosterAppointment Hour Booking

8 matches found

CVE•added 2021/10/04 11:20 a.m.•86 views

CVE-2021-24673

CVE-2021-24673 affects the WordPress Appointment Hour Booking plugin prior to v1.3.16. The vulnerability arises from insufficient escaping in Calendar Form settings, allowing authenticated high-privilege users to perform Stored Cross-Site Scripting (XSS) even when unfiltered_html is disallowed. I...

4.8CVSS4.7AI score0.00598EPSS

CVE•added 2019/07/11 12:26 p.m.•85 views

CVE-2019-13505

The CVE-2019-13505 entry concerns the WordPress Appointment Hour Booking plugin. Versions up to 1.1.45 are affected by a cross-site scripting (XSS) vulnerability in the E-mail field due to insufficient validation/handling of input, enabling malicious JavaScript execution. The issue is documented ...

6.1CVSS6AI score0.01376EPSS

Web

CVE•added 2022/06/13 12:42 p.m.•75 views

CVE-2022-1710

The CVE-2022-1710 entry concerns the WordPress Appointment Hour Booking plugin prior to version 1.3.56. The vulnerability arises from insufficient sanitization/escaping of the Calendar fields settings, enabling stored Cross-Site Scripting (XSS) by high-privilege users. Affected component: the plu...

4.8CVSS4.7AI score0.00565EPSS

CVE•added 2022/11/29 8:32 p.m.•69 views

CVE-2022-4035

The WordPress plugin Appointment Hour Booking (versions up to 1.3.72; OpenVAS notes

7.2CVSS6.4AI score0.00687EPSS

CVE•added 2022/11/18 6:54 p.m.•63 views

CVE-2022-41692

CVE-2022-41692 : WordPress Appointment Hour Booking plugin (versions

8.8CVSS6.3AI score0.00494EPSS

CVE•added 2021/10/11 10:45 a.m.•61 views

CVE-2021-24712

CVE-2021-24712 concerns the WordPress plugin “Appointment Hour Booking” (before 1.3.17). The root cause is inadequate sanitization of values used when creating new calendars, enabling an authenticated stored XSS attack. Impact is cross-site scripting via calendar name fields; exploitation require...

5.4CVSS5.4AI score0.00604EPSS

CVE•added 2022/11/29 8:30 p.m.•52 views

CVE-2022-4034

The WordPress Appointment Hour Booking Plugin is affected by a CSV Injection vulnerability in versions up to and including 1.3.72. Unauthenticated attackers can embed untrusted input into booking content, which may be exported as a CSV file and opened on a vulnerable system, potentially resulting...

7.8CVSS7.8AI score0.00614EPSS

CVE•added 2022/11/29 8:34 p.m.•48 views

CVE-2022-4036

CVE-2022-4036 affects the WordPress plugin Appointment Hour Booking. The root cause is an insufficiently strong hashing algorithm for the CAPTCHA secret, which is also exposed to users via a cookie, enabling a CAPTCHA bypass. Affected versions are up to and including 1.3.72. The vulnerability has...

5.3CVSS5.4AI score0.00436EPSS