VULNERABILITY INTELLIGENCE

CVE-2025-46241

CVSS score8.8 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2025-04-22

Last modified2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.92.