Input validation vulnerability in Appointment Booking Calendar 1.2.24

The Appointment Booking Calendar plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This means that in certain versions of the plugin up to and including 1.2.24, malicious code can be inserted into a webpage. This malicious code can then be executed whenever a user visits the page. This can be done by exploiting the ‘name’ and ‘ict’ parameters and is caused by inadequate sanitization and escaping of data.