Known vulnerabilities in Appointment Booking Calendar

Vendor: CodePeople
Software CPE: cpe:2.3:a:codepeople:appointment-booking-calendar:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Appointment Booking Calendar Appointment Booking Calendar is affected by 6 known vulnerabilities: 3 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70071 - Missing Authorization
CVE-2022-43482
CWE-862 Medium
No
No
1.3.70 09.12.2022 SB2022121313
#VU25777 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-9372
CWE-94 High
Available
No
1.3.35 05.03.2020 SB2020030502
#VU25776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9371
CWE-79 Low
Available
No
1.3.35 05.03.2020 SB2020030502
#VU19814 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
1.1.24 02.08.2019 SB2016012501
#VU19813 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
1.1.25 02.08.2019 SB2016012703
#VU19032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.3.19 08.07.2019 SB2019070814