Appointment Hour Booking – Booking Calendar vulnerabilities

Product

Appointment Hour Booking – Booking Calendar

by codepeople · last CVE Oct 1, 2026

CVEs

On KEV

7.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 3Low 0

Severity

Exploitation

Watch

Add Appointment Hour Booking – Booking Calendar to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-4034	7.8	1%	Nov 29	Appointment Hour Booking <= 1.3.72 - CSV Injection Affected: through 1.3.72
CVE-2026-96573	7.2	0%	Oct 1	Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer Affected: through 1.5.97