CVE-2021-36855 (booking_ultra_pro_appointments_booking_calendar)

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.