CVE-2026-120741 | MotoPress Appointment Booking Lite Plugin up to 2.4.8 on WordPress REST Endpoint name cross site scripting (EUVD-2026-118570)

A vulnerability, which was classified as problematic, has been found in MotoPress Appointment Booking Lite Plugin up to 2.4.8 on WordPress. This affects an unknown function of the component REST Endpoint. The manipulation of the argument Name leads to cross site scripting.

This vulnerability is traded as CVE-2026-120741. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More