High · 7.1 CVE-2026-81798 EUVD-2026-72648GHSA-rf52-23w5-wr23

WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerability

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS.

This issue affects Easy Appointments: from n/a through 4.0.2.1.

Vendor	Product	Affected	Fixed
Easy Appointments	Easy Appointments	≤ 4.0.2.1	—