5.9
Medium
CVE-2022-47438 Auth
Description
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Booking calendar, Appointment Booking System 3.2 | earliest → 3.2.3 | No fix stated |
Other CVEs of Booking calendar, Appointment Booking System
The 14 CVEs of Booking calendar, Appointment Booking System →
CVE-2026-73395
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking…
6.5
Medium
CVE-2026-8840
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization bypass in all…
5.3
Medium
CVE-2026-57778
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows…
5.3
Medium
CVE-2026-15289
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via…
5.9
Medium