Vulnerabilities > Codepeople > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-03-07 CVE-2022-0389 Cross-site Scripting vulnerability in Codepeople WP Time Slots Booking Form
The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
network
low complexity
codepeople CWE-79
4.8
4.8
2020-03-04 CVE-2020-9371 Cross-site Scripting vulnerability in Codepeople Appointment Booking Calendar
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress.
network
low complexity
codepeople CWE-79
4.8
4.8
2020-01-22 CVE-2020-7228 Cross-site Scripting vulnerability in Codepeople Calculated Fields Form
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms.
network
low complexity
codepeople CWE-79
5.4
5.4
2019-09-17 CVE-2016-10992 Cross-site Scripting vulnerability in Codepeople Music Store 1.0.141
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-27 CVE-2015-9346 Cross-site Scripting vulnerability in Codepeople Polls CP
The cp-polls plugin before 1.0.5 for WordPress has XSS.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-27 CVE-2014-10395 Cross-site Scripting vulnerability in Codepeople Polls CP
The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-21 CVE-2016-10908 Cross-site Scripting vulnerability in Codepeople Booking Calendar Contact Form
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-15 CVE-2019-14784 Cross-site Scripting vulnerability in Codepeople CP Contact Form With Paypal
The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-13 CVE-2018-20963 Cross-site Scripting vulnerability in Codepeople Contact Form Email
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
network
low complexity
codepeople CWE-79
6.1
6.1
2019-08-09 CVE-2019-14791 Cross-site Scripting vulnerability in Codepeople Appointment Booking Calendar 1.3.18
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.
network
low complexity
codepeople CWE-79
6.1
6.1