Vulnerabilities > Codepeople > Appointment Booking Calendar > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-04 CVE-2020-9371 Cross-site Scripting vulnerability in Codepeople Appointment Booking Calendar
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress.
network
low complexity
codepeople CWE-79
4.8
4.8
2019-08-09 CVE-2019-14791 Cross-site Scripting vulnerability in Codepeople Appointment Booking Calendar 1.3.18
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.
network
low complexity
codepeople CWE-79
6.1
6.1