WP Time Slots Booking Form, CVE-2022-0389

CVE, Research URL: CVE-2022-0389
Home page URL: Security reports for WP Time Slots Booking Form
Application: WP Time Slots Booking Form
Published on: Mar 07, 2022
Research Description: The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected versions: max 1.1.63.
Status: vulnerable