CVE-2021-24614

The CVE concerns WordPress Book appointment online plugin (versions before 1.39). It does not sanitize/escape Service Prices when outputting the List, enabling authenticated users with high privileges to execute stored XSS in the Services list (e.g., via the Price field). Remediation: upgrade to ...