CVE-2024-2342

CVE-2024-2342 affects the WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments (plugin slug: simply-schedule-appointments). The vulnerability is an SQL Injection via the customer_id parameter in shortcode contexts, exploitable by authenticated attackers with contributor ac...

CVE-2024-1760

Summary of CVE-2024-1760 (WordPress plugin: Appointment Booking Calendar — Simply Schedule Appointments) This vulnerability is a Cross-Site Request Forgery (CSRF) in the Simply Schedule Appointments plugin for WordPress. The root cause is missing or incorrect nonce validation in the ssa_factory_r...

CVE-2024-4288

The CVE-2024-4288 entry concerns the Appointment Booking Calendar — Simply Schedule Appointments Plugin for WordPress. Vulnerable through version 1.6.7.14 due to insufficient input sanitization and inadequate output escaping of the link parameter, enabling stored XSS. Exploitation requires authen...

CVE-2024-2341

CVE-2024-2341 refers to the WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments (plugin) with SQL Injection via the keys parameter in all versions up to 1.6.7.7, allowing authenticated subscribers to append queries and potentially exfiltrate data. Red Hat and NVD entries ...