9.3
Critical
CVE-2026-39764 Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions
Description
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Radius Booking — Booking Calendar for Appointments & Services 1.0 | earliest → 1.0.19 | No fix stated |