High · 7.1 CVE-2023-29427 EUVD-2023-32996GHSA-x5w7-5qm9-r7cc

WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Published Jun 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions.

Vendor	Product	Affected	Fixed
TMS	Booking for Appointments and Events Calendar – Amelia	≤ 1.0.75	—