Skip to content
OpenAdvisories

Vendor

turn2honey

2 known vulnerabilities.

Products

EMC – Easily Embed Calendly Scheduling 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-0868

    EMC Scheduling Manager <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via calendly Shortcode

    The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on u…

    turn2honey EMC – Easily Embed Calendly Scheduling Web / CMS
  • Medium 6.4
    CVE-2023-4995

    Embed Calendly <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Embed Calendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'calendly' shortcode in versions up to, and including, 3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible …

    turn2honey EMC – Easily Embed Calendly Scheduling Web / CMS