Appointment Hour Booking – Booking Calendar vulnerabilities

2 known vulnerabilities in Appointment Hour Booking – Booking Calendar from CodePeople. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Appointment Hour Booking – Booking Calendar: Improper Neutralization of Input During Web Page Generation

  CVE-2026-96573Oct 1, 2026CodePeople

  The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer in all versions up to, and including, 1.5.97 due to insufficient

• 7.8 High severity

  Appointment Hour Booking – Booking Calendar: Improper Neutralization of Formula Elements in a CSV File

  CVE-2022-4034Nov 29, 2022CodePeople

  The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported a