CVE-2026-96573 | codepeople Appointment Hour Booking Plugin up to 1.5.97 on WordPress Schedule Calendar List Renderer list_readmore_numberofwords cross site scripting

October 1, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in codepeople Appointment Hour Booking Plugin up to 1.5.97 on WordPress. The affected element is an unknown function of the component Schedule Calendar List Renderer. Performing a manipulation of the argument list_readmore_numberofwords results in cross site scripting.

This vulnerability is cataloged as CVE-2026-96573. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More