Vulnerabilities > Nsquared > Simply Schedule Appointments > 1.6.7.9

DATE CVE VULNERABILITY TITLE RISK
2024-05-16 CVE-2024-4288 Cross-site Scripting vulnerability in Nsquared Simply Schedule Appointments
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in versions up to, and including, 1.6.7.14 due to insufficient input sanitization and output escaping.
network
low complexity
nsquared CWE-79
5.4