Skip to content
Vulnerability intelligence

CVE-2026-93875: JetAppointment stored cross-site scripting

A public booking form stores text that runs when a WordPress administrator opens appointment details.

2026