Online Booking & Scheduling Calendar for WordPress by vcita

Reflected Cross Site Scripting (XSS) vulnerability <= 4.3.2

Unauth. Stored CrossSite Scripting (XSS) vulnerability < 4.3.2

Missing Authorization to Account Logout vulnerability <= 4.2.10

Missing Authorization on RESTAPI vulnerability <= 4.3.5

Missing Authorization to Arbitrary File Upload vulnerability <= 4.3.5