5.9
Medium
CVE-2023-23971 Auth
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Time Slots Booking Form 1.1 | earliest → 1.1.81 | No fix stated |
Other CVEs of WP Time Slots Booking Form
The 11 CVEs of WP Time Slots Booking Form →
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions
8.5
High
CVE-2026-40791
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions
7.1
High
CVE-2026-32432
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
5.3
Medium
CVE-2025-68569
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
6.5
Medium