vCita Online Booking & Scheduling Calendar by vcita

• CVE-2026-14433 High 7.2 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter 0.4%