Input validation vulnerability in WordPress Online Booking and Scheduling Plugin – Bookly 23.2

A popular tool for scheduling and booking appointments on WordPress websites, called Bookly, has a security vulnerability that allows hackers to insert harmful code into the site. This can be done by changing the color profile setting, and can affect all versions of the plugin up to 23.2. This means that even users with limited access, such as staff members and subscribers, can potentially be targeted by this attack.