Advisories · Technology
codepeople Appointment Booking Calendar.
Every CVE that names codepeople Appointment Booking Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter
- codepeople Appointment Booking Calendar
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
- codepeople Appointment Booking Calendar
- Broken access control
- CVSS 4.3 Medium
Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
- codepeople Appointment Booking Calendar
- Information disclosure
- CVSS 5.3 Medium
Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
- codepeople Appointment Booking Calendar
- Broken access control
- CVSS 5.4 Medium
WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability
- codepeople Appointment Booking Calendar
- Broken access control
- CVSS 5.3 Medium
WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability
- codepeople Appointment Booking Calendar
- Broken access control
- CVSS 8.2 High
WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability
- codepeople Appointment Booking Calendar
- Cross-site request forgery (CSRF)