Boeing777

**Name of the Vulnerable Software and Affected Versions** Smart Appointment & Booking plugin for WordPress versions up to and including 1.0.7 **Description** The Smart Appointment & Booking plugin for WordPress is susceptible to Stored Cross-Site Scripting through the `saab save form data` AJAX action. This is due to inadequate input sanitization and output escaping of user-provided attributes. Authenticated attackers with Subscriber-level access or higher can inject malicious web scripts into pages. These scripts will execute when a user accesses the compromised page. The vulnerable parameter is not specified. **Recommendations** Update the Smart Appointment & Booking plugin to a version newer than 1.0.7.