Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-29	CVE-2022-4035	Cross-site Scripting vulnerability in Dwbooster Appointment Hour Booking The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tags possible. network low complexity dwbooster CWE-79	6.1
2022-11-29	CVE-2022-4036	Inadequate Encryption Strength vulnerability in Dwbooster Appointment Hour Booking The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. network low complexity dwbooster CWE-326	5.3
2019-07-11	CVE-2019-13505	Cross-site Scripting vulnerability in Dwbooster Appointment Hour Booking 1.1.44 The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1. network low complexity dwbooster CWE-79	6.1