Skip to content
OpenAdvisories
High · 7.6 CVE-2023-50851 EUVD-2023-55584GHSA-9vx6-546g-266v

WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: N Squared Product: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin: from n/a before 1.6.6.1.

Affected products

VendorProductAffectedFixed
N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.6.1 1.6.6.1

References