ladela WordPress Online Booking and Scheduling Plugin – Bookly

• CVE-2023-1159 Medium 4.0 The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This 0.4%
• CVE-2023-1172 High 7.2 The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. 0.5%