zealopensource Smart Appointment & Booking

• CVE-2026-5693 Medium 5.3 Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation 0.2%
• CVE-2026-0742 Medium 6.4 Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Action 0.3%