Skip to content
OpenAdvisories

Vendor

Themovation

3 known vulnerabilities.

Products

Bellevue 1 QuickCal - Appointment Booking Calendar for WordPress 1 QuickCal 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-15984

    QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters

    The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated atta…

    Themovation QuickCal Web / CMS