Bookly vulnerabilities
We track 2 vulnerabilities in Bookly products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.
2vulnerabilities
1critical
1high
0exploited
8.2average CVSS score
Latest Bookly vulnerabilities
- 9.3 Critical severity
Bookly: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Blind SQL Injection.This issue affects Bookly: from n/a through 27.7.
- 7.1 High severity
Bookly: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Reflected XSS.This issue affects Bookly: from n/a through <= 26.7.