7.1
High
CVE-2024-35734 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Time Slots Booking Form 1.2 | earliest → 1.2.10 | No fix stated |
Other CVEs of WP Time Slots Booking Form
The 11 CVEs of WP Time Slots Booking Form →
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions
8.5
High
CVE-2026-40791
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions
7.1
High
CVE-2026-32432
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
5.3
Medium
CVE-2025-68569
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
6.5
Medium