Advisories · Technology
codepeople Appointment Hour Booking – Booking Calendar.
Every CVE that names codepeople Appointment Hour Booking – Booking Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
- codepeople Appointment Hour Booking – Booking Calendar
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration
- codepeople Appointment Hour Booking – Booking Calendar
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
- codepeople Appointment Hour Booking – Booking Calendar
- CWE-804
- CVSS 7.2 High
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
- codepeople Appointment Hour Booking – Booking Calendar
- Cross-site scripting (XSS)
- CVSS 5.8 Medium
Appointment Hour Booking <= 1.3.72 - CSV Injection
- codepeople Appointment Hour Booking – Booking Calendar
- Other injection