CVE-2026-119152 | LatePoint Appointment Booking Plugin up to 5.7.6 on WordPress Booking Form customer[email] cross site scripting

A vulnerability was found in LatePoint Appointment Booking Plugin up to 5.7.6 on WordPress. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Booking Form. Performing a manipulation of the argument customer[email] results in cross site scripting.

This vulnerability was named CVE-2026-119152. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More