AH
Product
Appointment Hour Booking
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Appointment Hour Booking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41692 | 8.8 | Nov 18 | WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability Affected: before 1.3.72 |
| CVE-2022-4034 | 7.8 | Nov 29 | Appointment Hour Booking <= 1.3.72 - CSV Injection Affected: through 1.3.72 |
| CVE-2022-4035 | 6.1 | Nov 29 | Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form Affected: through 1.3.72 |
| CVE-2019-13505 | 6.1 | Jul 11 | The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1 Affected: 1.1.44 |
| CVE-2021-24712 | 5.4 | Oct 11 | The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars Affected: before 1.3.17 |
| CVE-2022-4036 | 5.3 | Nov 29 | Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass Affected: through 1.3.72 |
| CVE-2022-1710 | 4.8 | Jun 13 | Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting Affected: before 1.3.56 |
| CVE-2021-24673 | 4.8 | Oct 4 | The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site… Affected: before 1.3.16 |
Showing 8
