Medium severity4.8NVD Advisory· Published Mar 7, 2022· Updated Jun 17, 2026
CVE-2022-0389
CVE-2022-0389
Description
The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:wordpress:*:*range: <1.1.63
- (no CPE)range: 1.1.63
- Range: <1.1.63
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/788ead78-9aa2-49a3-b191-12114be8270bnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.