CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0389

The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.0%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 3.5

References

Products affected by CVE-2022-0389

Codepeople » Wp Time Slots Booking Form » Version: N/A

cpe:2.3:a:codepeople:wp_time_slots_booking_form:-
Codepeople » Wp Time Slots Booking Form » Version: 1.1.15

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.15
Codepeople » Wp Time Slots Booking Form » Version: 1.1.16

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.16
Codepeople » Wp Time Slots Booking Form » Version: 1.1.17

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.17
Codepeople » Wp Time Slots Booking Form » Version: 1.1.18

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.18
Codepeople » Wp Time Slots Booking Form » Version: 1.1.19

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.19
Codepeople » Wp Time Slots Booking Form » Version: 1.1.20

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.20
Codepeople » Wp Time Slots Booking Form » Version: 1.1.21

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.21
Codepeople » Wp Time Slots Booking Form » Version: 1.1.22

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.22
Codepeople » Wp Time Slots Booking Form » Version: 1.1.23

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.23
Codepeople » Wp Time Slots Booking Form » Version: 1.1.24

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.24
Codepeople » Wp Time Slots Booking Form » Version: 1.1.25

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.25
Codepeople » Wp Time Slots Booking Form » Version: 1.1.26

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.26
Codepeople » Wp Time Slots Booking Form » Version: 1.1.27

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.27
Codepeople » Wp Time Slots Booking Form » Version: 1.1.28

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.28
Codepeople » Wp Time Slots Booking Form » Version: 1.1.29

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.29
Codepeople » Wp Time Slots Booking Form » Version: 1.1.30

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.30
Codepeople » Wp Time Slots Booking Form » Version: 1.1.31

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.31
Codepeople » Wp Time Slots Booking Form » Version: 1.1.32

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.32
Codepeople » Wp Time Slots Booking Form » Version: 1.1.33

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.33
Codepeople » Wp Time Slots Booking Form » Version: 1.1.34

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.34
Codepeople » Wp Time Slots Booking Form » Version: 1.1.35

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.35
Codepeople » Wp Time Slots Booking Form » Version: 1.1.36

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.36
Codepeople » Wp Time Slots Booking Form » Version: 1.1.37

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.37
Codepeople » Wp Time Slots Booking Form » Version: 1.1.38

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.38
Codepeople » Wp Time Slots Booking Form » Version: 1.1.39

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.39
Codepeople » Wp Time Slots Booking Form » Version: 1.1.40

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.40
Codepeople » Wp Time Slots Booking Form » Version: 1.1.41

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.41
Codepeople » Wp Time Slots Booking Form » Version: 1.1.42

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.42
Codepeople » Wp Time Slots Booking Form » Version: 1.1.43

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.43
Codepeople » Wp Time Slots Booking Form » Version: 1.1.44

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.44
Codepeople » Wp Time Slots Booking Form » Version: 1.1.45

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.45
Codepeople » Wp Time Slots Booking Form » Version: 1.1.46

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.46
Codepeople » Wp Time Slots Booking Form » Version: 1.1.47

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.47
Codepeople » Wp Time Slots Booking Form » Version: 1.1.48

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.48
Codepeople » Wp Time Slots Booking Form » Version: 1.1.49

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.49
Codepeople » Wp Time Slots Booking Form » Version: 1.1.50

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.50
Codepeople » Wp Time Slots Booking Form » Version: 1.1.51

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.51
Codepeople » Wp Time Slots Booking Form » Version: 1.1.52

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.52
Codepeople » Wp Time Slots Booking Form » Version: 1.1.53

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.53
Codepeople » Wp Time Slots Booking Form » Version: 1.1.54

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.54
Codepeople » Wp Time Slots Booking Form » Version: 1.1.55

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.55
Codepeople » Wp Time Slots Booking Form » Version: 1.1.56

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.56
Codepeople » Wp Time Slots Booking Form » Version: 1.1.57

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.57
Codepeople » Wp Time Slots Booking Form » Version: 1.1.58

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.58
Codepeople » Wp Time Slots Booking Form » Version: 1.1.59

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.59
Codepeople » Wp Time Slots Booking Form » Version: 1.1.60

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.60
Codepeople » Wp Time Slots Booking Form » Version: 1.1.61

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.61
Codepeople » Wp Time Slots Booking Form » Version: 1.1.62

cpe:2.3:a:codepeople:wp_time_slots_booking_form:1.1.62

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0389

Products

Pricing

Contact Us