Skip to content
OpenAdvisories
High · 7.1 CVE-2026-110382 EUVD-2026-103423GHSA-g89w-rppf-jf22

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability

Published Oct 18, 2026 · Updated Oct 19, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.

Affected products

VendorProductAffectedFixed
NSquared Simply Schedule Appointments ≤ 1.6.12.35 —

References