CVE-2025-22719: WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through <= 1.2.16.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22719?
CVE-2025-22719 is classified as a stored Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2025-22719?
To fix CVE-2025-22719, update VikAppointments Services Booking Calendar to a version later than 1.2.16.
What software is affected by CVE-2025-22719?
CVE-2025-22719 affects the VikAppointments Services Booking Calendar plugin for WordPress up to version 1.2.16.
What kind of attack can be executed due to CVE-2025-22719?
CVE-2025-22719 allows attackers to execute stored Cross-Site Scripting (XSS) attacks on vulnerable installations.
Can I still use VikAppointments Services Booking Calendar if it is affected by CVE-2025-22719?
Using an affected version of VikAppointments Services Booking Calendar poses a security risk, so it is advised to update immediately.