Appointment Hour Booking – Booking Calendar
- Software type
- Other
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/21/2026, Appointment Hour Booking – Booking Calendar recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Appointment Hour Booking – Booking Calendar and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-96573Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List RendererCVE-2026-1083Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field ConfigurationCVE-2022-4036Appointment Hour Booking <= 1.3.72 - CAPTCHA BypassCVE-2022-4035Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment FormCVE-2022-4034Appointment Hour Booking <= 1.3.72 - CSV Injection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-96573Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer | Exploitation statusNot exploited | FixYes | Published10/01/2026 | SeverityHigh |
CVE-2026-1083Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration | Exploitation statusNot exploited | FixYes | Published01/28/2026 | SeverityMedium |
CVE-2022-4036Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass | Exploitation statusNot exploited | FixYes | Published11/29/2022 | SeverityMedium |
CVE-2022-4035Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form | Exploitation statusNot exploited | FixYes | Published11/29/2022 | SeverityHigh |
CVE-2022-4034Appointment Hour Booking <= 1.3.72 - CSV Injection | Exploitation statusNot exploited | FixYes | Published11/29/2022 | SeverityMedium |
5 Results | Page 1 of 1