Input validation vulnerability in Booking for Appointments and Events Calendar – Amelia 1.0.85

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress has a security vulnerability in all versions up to, and including, 1.0.85. This vulnerability allows malicious actors with contributor-level or higher permission on the website to inject malicious scripts into pages. When a user visits an affected page, the malicious script will execute, allowing the attacker to take control of the user’s computer. It is important to update the plugin to the latest version to ensure the website is safe and secure.