CVE-2026-14334 | Booking Calendar/Appointment Booking System Plugin SVG File cross site scripting

A vulnerability marked as problematic has been reported in Booking Calendar and Appointment Booking System Plugin up to 3.2.36 on WordPress. The impacted element is an unknown function of the component SVG File Handler. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-14334. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More