Skip to content
Sign in
Not rated

CVE-2022-1710 The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar…

Description

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Affected products and versions

Product Affected versions Fixed in
Appointment Hour Booking – WordPress Booking Plugin 1.3 earliest → < 1.3.56 1.3.56

Other CVEs of Appointment Hour Booking – WordPress Booking Plugin

The 3 CVEs of Appointment Hour Booking – WordPress Booking Plugin →
CVE-2021-24712 The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new… Not rated CVE-2021-24673 The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing… Not rated
Track this CVE